JohnSnow
2015-10-07, 04:17
whatever infected my wife's laptop opens so many popups and redirects that I can't read anything in a browser, and it presents all kinds of 'click here to fix your PC' type messages. I ran the FRST tool and the logs are posted below. I ran the ASWMBR tool but it closes before I can save the log. Please let me know if there is some trick to saving the log.
Any help greatly appreciated.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:04-10-2015
Ran by Abi (administrator) on Abi-Laptop (06-10-2015 20:47:16)
Running from C:\Users\Abi\Desktop
Loaded Profiles: Abi (Available Profiles: Abi)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 10 (Default browser: "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" -- "%1")
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Cinema PlusV04.10) C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-1-6.exe
(Cinema PlusV04.10) C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-6.exe
(Cinema PlusV04.10) C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Cinema PlusV04.10) C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-6.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
() C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD\hnsfFB53.tmp
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\Users\Abi\AppData\Roaming\NetService\netservice.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(CyberLink) C:\Program Files (x86)\Cyberlink\MediaEspresso\DeviceDetector\DeviceDetector.exe
() C:\Program Files\shopperz011020151101\Vubficvh.exe
(SS) C:\Program Files (x86)\SwiftSearch_1.10.0.25\Service\swsesrvc.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files\shopperz011020151101\Kixjucfio.EXE
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\shopperz011020151101\csrcc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(MyBrowser 1.0.2V06.10) C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10.exe
() C:\Users\Abi\AppData\Local\gmsd_ca_005010107\upgmsd_ca_005010107.exe
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
() C:\Users\Abi\AppData\Local\Temp\nso9DF5.tmp
(MyBrowser 1.0.2V06.10) C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6.exe
(MyBrowser 1.0.2V06.10) C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6.exe
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
() C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD\knsqCB46.tmp
() C:\Users\Abi\AppData\Roaming\SSN\ssn.exe
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
(MyBrowser 1.0.2V06.10) C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10.exe
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
() C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12452456 2012-02-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1021056 2012-03-08] (Atheros Commnucations)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800896 2012-03-08] (Atheros Commnucations)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2822952 2012-02-24] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Run: [InstantUpdate] => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuDaemon.exe [124520 2012-04-06] ()
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-09-20] (Egis Technology Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6111824 2015-09-03] (AVAST Software)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [mbot_ca_014010106] => [X]
HKLM-x32\...\Run: [gmsd_ca_005010107] => C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe [3976336 2015-10-05] ()
HKLM-x32\...\RunOnce: [upgmsd_ca_005010107.exe] => C:\Users\Abi\AppData\Local\gmsd_ca_005010107\upgmsd_ca_005010107.exe [3300496 2015-10-05] ()
HKLM-x32\...\RunOnce: [Update] => C:\Users\Abi\AppData\Roaming\ASPackage\ASPackage.exe /runonce
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Run: [Save Serp Now] => C:\Users\Abi\AppData\Roaming\SSN\updssn.exe [26112 2014-11-21] ()
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Run: [GoogleChromeAutoLaunch_5E135CCE23F4BBF9E00EFA280613872A] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe [637440 2015-05-12] (Crossbrowse)
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Policies\Explorer: [NoLogOff] 0
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [450048 2011-09-12] ()
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-08-14] (AVAST Software)
Startup: C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk [2015-10-06]
ShortcutTarget: crossbrowse.lnk -> C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (Crossbrowse)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog9 01 C:\Windows\SysWOW64\Kixjucfio.dll [283496 2015-10-04] ()
Winsock: Catalog9 02 C:\Windows\SysWOW64\Kixjucfio.dll [283496 2015-10-04] ()
Winsock: Catalog9 03 C:\Windows\SysWOW64\Kixjucfio.dll [283496 2015-10-04] ()
Winsock: Catalog9 04 C:\Windows\SysWOW64\Kixjucfio.dll [283496 2015-10-04] ()
Winsock: Catalog9 16 C:\Windows\SysWOW64\Kixjucfio.dll [283496 2015-10-04] ()
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{15CD2FC4-BBE6-4572-989A-6AE7E0E8ED2E}: [NameServer] 82.163.143.162,82.163.142.164
Tcpip\..\Interfaces\{F6B24CDD-A746-40B4-A6EC-4E45B40509B2}: [NameServer] 82.163.143.162,82.163.142.164
Tcpip\..\Interfaces\{F6B24CDD-A746-40B4-A6EC-4E45B40509B2}: [DhcpNameServer] 64.71.255.204 64.71.255.198
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www-searching.com/search.aspx?s=FA5zbwybl001,5e975b8b-9a9b-4b31-93c1-85af2746d910,&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www-searching.com/search.aspx?s=FA5zbwybl001,5e975b8b-9a9b-4b31-93c1-85af2746d910,&q={searchTerms}
SearchScopes: HKLM -> {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = hxxp://www-searching.com/search.aspx?s=FA5zbwybl001,5e975b8b-9a9b-4b31-93c1-85af2746d910,&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www-searching.com/search.aspx?s=FA5zbwybl001,5e975b8b-9a9b-4b31-93c1-85af2746d910,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> {4F1251B0-ED36-4A53-B1D8-0700B350C9B6} URL = hxxp://www-searching.com/search.aspx?s=FA5zbwybl001,5e975b8b-9a9b-4b31-93c1-85af2746d910&site=shyosie&prd=set&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> {5885ECFB-B6D1-4EDE-AF43-AED548EF4833} URL =
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = hxxp://www-searching.com/search.aspx?s=FA5zbwybl001,5e975b8b-9a9b-4b31-93c1-85af2746d910,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-14] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO: No Name -> {93F8D5C2-0BF6-4315-9316-AA5FC9948AC5} -> No File
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-03-08] (Atheros Commnucations)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-14] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-10-03] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll [2013-09-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-10-03] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-07] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll [2013-09-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [No File]
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-05-11] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)
FF HKLM\...\Firefox\Extensions: [{93F8D5C2-0BF6-4315-9316-AA5FC9948AC5}] - C:\Program Files\shopperz011020151101\Firefox
FF Extension: shopperz011020151101 - C:\Program Files\shopperz011020151101\Firefox [2015-10-04]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-12-02]
FF HKLM-x32\...\Firefox\Extensions: [{93F8D5C2-0BF6-4315-9316-AA5FC9948AC5}] - C:\Program Files\shopperz011020151101\Firefox
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.ca/
CHR StartupUrls: Default -> "hxxp://www.trovi.com/?gd=&ctid=CT3333887&octid=EB_ORIGINAL_CTID&ISID=M9949BBB5-612F-46C6-AB70-1CB1982CDBD9&SearchSource=55&CUI=&UM=8&UP=SPA5B516FC-0DD9-40D3-9CAD-07D1BA184ADB&D=100415&SSPV="
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\pdf.dll => No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.2_0\McChPlg.dll => No File
CHR Plugin: (Adobe Acrobat) - c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL => No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll => No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll => No File
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll => No File
CHR Profile: C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-11-25]
CHR Extension: (YouTube) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-25]
CHR Extension: (Google Search) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-25]
CHR Extension: (MyBrowser 1.0.2V06.10) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh [2015-10-06]
CHR Extension: (Google Docs Offline) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-06]
CHR Extension: (Avast Online Security) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-08-25]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-04]
CHR Extension: (Skype Click to Call) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-12-02]
CHR Extension: (CinemaP-1.9cV04.10) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-10-04]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29]
CHR Extension: (CinemaPlus-3.2cV04.10) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-10-04]
CHR Extension: (Gmail) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-25]
CHR HKU\S-1-5-21-1835340503-273950527-3103715778-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-08-14]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [107648 2012-03-08] (Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-08-14] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4047768 2015-08-14] (Avast Software)
R2 bigosucu; C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD\knsqCB46.tmp [396288 2015-10-06] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R3 csrcc; C:\Program Files\shopperz011020151101\csrcc.exe [1444544 2015-10-01] ()
R2 gyvixodu; C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD\hnsfFB53.tmp [203776 2015-10-04] () [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-03-16] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-16] (Intel Corporation)
R3 Kixjucfio; C:\Program Files\shopperz011020151101\Kixjucfio.exe [2024808 2015-10-01] ()
R2 NetTcpHandler; C:\Users\Abi\AppData\Roaming\NetService\netservice.exe [173088 2015-07-08] ()
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 shopperz011020151101 Updater; C:\Program Files\shopperz011020151101\Vubficvh.exe [171200 2015-10-01] ()
R2 swsesrvc_1.10.0.25; C:\Program Files (x86)\SwiftSearch_1.10.0.25\Service\swsesrvc.exe [301648 2015-09-22] (SS)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [76960 2012-02-27] (Atheros) [File not signed]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-08-14] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-08-14] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-08-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-08-14] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048344 2015-08-16] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-08-14] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-08-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-08-14] (AVAST Software)
R1 bsdriver; C:\Windows\system32\drivers\bsdriver.sys [34720 2015-10-04] ()
R1 cherimoya; C:\Windows\System32\drivers\cherimoya.sys [61344 2015-09-24] (Cherimoya Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [115152 2015-08-14] (AVAST Software)
R1 swsedrvr_vt_1_10_0_25; C:\Windows\System32\drivers\swsedrvr_vt_1_10_0_25.sys [61304 2015-09-22] (SS)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-08-14] (Avast Software)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-06 20:47 - 2015-10-06 20:47 - 00033247 _____ C:\Users\Abi\Desktop\FRST.txt
2015-10-06 20:46 - 2015-10-06 20:47 - 00000000 ____D C:\FRST
2015-10-06 20:45 - 2015-10-06 20:43 - 02193920 _____ (Farbar) C:\Users\Abi\Desktop\FRST64.exe
2015-10-06 20:41 - 2015-10-06 20:41 - 00000000 ____D C:\Users\Abi\Desktop\SoftwareTools
2015-10-06 13:47 - 2015-10-06 20:39 - 00002824 _____ C:\Windows\System32\Tasks\APSnotifierPP1
2015-10-06 13:47 - 2015-10-06 20:39 - 00002822 _____ C:\Windows\System32\Tasks\APSnotifierPP3
2015-10-06 13:47 - 2015-10-06 20:39 - 00002822 _____ C:\Windows\System32\Tasks\APSnotifierPP2
2015-10-06 13:47 - 2015-10-06 20:39 - 00000378 _____ C:\Windows\Tasks\APSnotifierPP1.job
2015-10-06 13:47 - 2015-10-06 20:39 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP3.job
2015-10-06 13:47 - 2015-10-06 20:39 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP2.job
2015-10-06 13:47 - 2015-10-06 13:47 - 00004034 _____ C:\Windows\System32\Tasks\ORGJcze6Wh9asiLsOyqhOX
2015-10-06 13:47 - 2015-10-06 13:47 - 00001049 _____ C:\Users\Abi\Desktop\AnyProtect.lnk
2015-10-06 13:47 - 2015-10-06 13:47 - 00001008 _____ C:\Windows\Tasks\ORGJcze6Wh9asiLsOyqhOX.job
2015-10-06 13:47 - 2015-10-06 13:47 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
2015-10-06 13:46 - 2015-10-06 20:46 - 00005858 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6.job
2015-10-06 13:46 - 2015-10-06 20:46 - 00003134 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6.job
2015-10-06 13:46 - 2015-10-06 13:47 - 00000000 ____D C:\Program Files (x86)\AnyProtectEx
2015-10-06 13:46 - 2015-10-06 13:46 - 00613255 _____ (CMI Limited) C:\Users\Abi\AppData\Local\nsp2B0E.tmp
2015-10-06 13:46 - 2015-10-06 13:46 - 00008886 _____ C:\Windows\System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6
2015-10-06 13:46 - 2015-10-06 13:46 - 00008544 _____ C:\Windows\System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-7
2015-10-06 13:46 - 2015-10-06 13:46 - 00006500 _____ C:\Windows\System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-7
2015-10-06 13:46 - 2015-10-06 13:46 - 00006162 _____ C:\Windows\System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6
2015-10-06 13:46 - 2015-10-06 13:46 - 00005514 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-7.job
2015-10-06 13:46 - 2015-10-06 13:46 - 00005472 _____ C:\Windows\System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5
2015-10-06 13:46 - 2015-10-06 13:46 - 00003470 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-7.job
2015-10-06 13:46 - 2015-10-06 13:46 - 00002442 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5_user.job
2015-10-06 13:46 - 2015-10-06 13:46 - 00002442 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5.job
2015-10-06 13:46 - 2015-10-06 13:46 - 00000000 __SHD C:\Users\Abi\AppData\Roaming\AnyProtectEx
2015-10-06 13:46 - 2015-10-06 13:46 - 00000000 ____D C:\Program Files (x86)\e63821bb-3a31-457e-8aa3-f2cc9efa11bf
2015-10-06 13:45 - 2015-10-06 20:45 - 00002108 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10_user.job
2015-10-06 13:45 - 2015-10-06 14:23 - 00000000 ____D C:\Users\Abi\AppData\Local\gmsd_ca_005010107
2015-10-06 13:45 - 2015-10-06 13:46 - 00000000 ____D C:\Program Files (x86)\MyBrowser 1.0.2V06.10
2015-10-06 13:45 - 2015-10-06 13:45 - 00007520 _____ C:\Windows\System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-3
2015-10-06 13:45 - 2015-10-06 13:45 - 00004490 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-3.job
2015-10-06 13:45 - 2015-10-06 13:45 - 00000000 ____D C:\Program Files (x86)\gmsd_ca_005010107
2015-10-06 13:44 - 2015-10-06 13:44 - 00004078 _____ C:\Windows\System32\Tasks\Crossbrowse
2015-10-06 13:44 - 2015-10-06 13:44 - 00002398 _____ C:\Users\Public\Desktop\Crossbrowse.lnk
2015-10-06 13:44 - 2015-10-06 13:44 - 00001052 _____ C:\Windows\Tasks\Crossbrowse.job
2015-10-06 13:44 - 2015-10-06 13:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
2015-10-06 13:44 - 2015-10-06 13:44 - 00000000 ____D C:\Program Files (x86)\Crossbrowse
2015-10-05 22:07 - 2015-10-05 22:07 - 00002239 _____ C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
2015-10-05 22:07 - 2015-10-05 22:07 - 00000207 _____ C:\Windows\tweaking.com-regbackup-Abi-Laptop-Windows-7-Home-Premium-(64-bit).dat
2015-10-05 22:07 - 2015-10-05 22:07 - 00000000 ____D C:\RegBackup
2015-10-05 22:07 - 2015-10-05 22:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2015-10-05 22:07 - 2015-10-05 22:07 - 00000000 ____D C:\Program Files (x86)\Tweaking.com
2015-10-05 22:06 - 2015-10-05 22:04 - 04687448 _____ (Tweaking.com) C:\Users\Abi\Desktop\tweaking.com_registry_backup_setup.exe
2015-10-05 22:04 - 2015-10-05 22:04 - 04687448 _____ (Tweaking.com) C:\Users\Abi\Downloads\tweaking.com_registry_backup_setup.exe
2015-10-05 18:35 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2015-10-05 18:31 - 2009-06-10 17:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20151005-183130.backup
2015-10-05 18:24 - 2015-10-05 18:24 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2015-10-05 18:23 - 2015-10-05 19:50 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-10-05 18:23 - 2015-10-05 18:35 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-10-05 18:23 - 2015-10-05 18:23 - 00001395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-10-05 18:23 - 2015-10-05 18:23 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2015-10-05 18:23 - 2015-10-05 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-10-05 18:23 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2015-10-05 18:21 - 2015-10-05 18:22 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Abi\Downloads\spybot-2.4.exe
2015-10-04 21:34 - 2015-10-06 15:34 - 00002442 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5_user.job
2015-10-04 21:34 - 2015-10-06 15:34 - 00002442 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5.job
2015-10-04 21:34 - 2015-10-04 21:34 - 00005472 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5
2015-10-04 21:33 - 2015-10-06 20:38 - 00005858 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-6.job
2015-10-04 21:33 - 2015-10-06 20:38 - 00003134 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-6.job
2015-10-04 21:33 - 2015-10-06 15:33 - 00005514 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-7.job
2015-10-04 21:33 - 2015-10-06 15:33 - 00003470 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-7.job
2015-10-04 21:33 - 2015-10-04 21:33 - 00034720 _____ () C:\Windows\system32\Drivers\bsdriver.sys
2015-10-04 21:33 - 2015-10-04 21:33 - 00008886 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-6
2015-10-04 21:33 - 2015-10-04 21:33 - 00008544 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-7
2015-10-04 21:33 - 2015-10-04 21:33 - 00006500 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-7
2015-10-04 21:33 - 2015-10-04 21:33 - 00006162 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-6
2015-10-04 21:32 - 2015-10-06 15:32 - 00005180 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-11.job
2015-10-04 21:32 - 2015-10-06 15:32 - 00004490 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-3.job
2015-10-04 21:32 - 2015-10-06 13:46 - 00000000 ____D C:\Program Files (x86)\8a9babaa-d527-4b3a-9dbf-f6d4d5a9ba3b
2015-10-04 21:32 - 2015-10-05 06:16 - 00002108 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-10_user.job
2015-10-04 21:32 - 2015-10-04 21:32 - 00008210 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-11
2015-10-04 21:32 - 2015-10-04 21:32 - 00007520 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-3
2015-10-04 21:32 - 2015-10-04 21:32 - 00003458 _____ C:\Windows\System32\Tasks\bvxvexvbg
2015-10-04 21:31 - 2015-10-06 13:18 - 00000000 ____D C:\Users\Abi\AppData\Local\bvxvexvbg
2015-10-04 21:31 - 2015-10-04 22:17 - 00000000 ____D C:\ProgramData\KeyStream
2015-10-04 21:31 - 2015-10-04 22:07 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV04.10
2015-10-04 21:31 - 2015-10-04 21:33 - 00000000 ____D C:\ProgramData\Service0561
2015-10-04 21:31 - 2015-10-04 21:33 - 00000000 ____D C:\Program Files (x86)\Feed Notifier
2015-10-04 21:31 - 2015-10-04 21:31 - 00000000 ____D C:\ProgramData\12db864551ae4c578eb17db1a9f5d3cf
2015-10-04 21:30 - 2015-10-05 19:51 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2015-10-04 21:30 - 2015-10-05 06:22 - 00000000 ____D C:\Users\Abi\AppData\Roaming\RunDir
2015-10-04 21:30 - 2015-10-05 06:18 - 00000000 ____D C:\Program Files\shopperz011020151101
2015-10-04 21:30 - 2015-10-04 21:32 - 00000000 ____D C:\Users\Abi\AppData\Local\SearchProtect
2015-10-04 21:30 - 2015-10-04 21:31 - 00004712 _____ C:\Windows\SysWOW64\Kixjucfio.ini
2015-10-04 21:30 - 2015-10-04 21:31 - 00002424 _____ C:\Windows\SysWOW64\KixjucfioOff.ini
2015-10-04 21:30 - 2015-10-04 21:31 - 00002424 _____ C:\Windows\system32\KixjucfioOff.ini
2015-10-04 21:30 - 2015-10-04 21:30 - 00003640 _____ C:\Windows\System32\Tasks\Delhivv
2015-10-04 21:30 - 2015-10-04 21:30 - 00001905 _____ C:\Users\Abi\Desktop\jogotempo.lnk
2015-10-04 21:30 - 2015-10-04 21:30 - 00000045 _____ C:\user.js
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Windows\system32\dev
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\Roaming\ortmp
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\Roaming\NetService
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jogotempo
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\LocalLow\Company
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\Local\Tempfolder
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\Local\MyBrowser
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Program Files (x86)\jogotempo
2015-10-04 21:30 - 2015-10-01 04:03 - 00283496 _____ C:\Windows\SysWOW64\Kixjucfio.dll
2015-10-04 21:30 - 2015-09-24 11:46 - 00061344 _____ (Cherimoya Ltd) C:\Windows\system32\Drivers\cherimoya.sys
2015-10-04 21:29 - 2015-10-04 22:40 - 00000000 ____D C:\Users\Abi\AppData\Local\SmartWeb
2015-10-04 21:29 - 2015-10-04 21:29 - 00000000 ____D C:\Users\Abi\AppData\LocalLow\SmartWeb
2015-10-04 21:28 - 2015-10-05 06:17 - 00000292 _____ C:\Windows\Tasks\yxnb.job
2015-10-04 21:27 - 2015-10-05 21:40 - 00170647 _____ C:\Windows\wininit.ini
2015-10-04 21:27 - 2015-10-04 22:33 - 00000000 ____D C:\Users\Abi\AppData\Local\DeskBar
2015-10-04 21:27 - 2015-10-04 21:27 - 00002297 _____ C:\Users\Abi\Desktop\BrowserAir.lnk
2015-10-04 21:27 - 2015-10-04 21:27 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserAir
2015-10-04 21:27 - 2015-10-04 21:27 - 00000000 ____D C:\Users\Abi\AppData\Local\Crossbrowse
2015-10-04 21:27 - 2015-10-04 21:27 - 00000000 ____D C:\Users\Abi\AppData\Local\BrowserAir
2015-10-04 21:26 - 2015-10-06 20:38 - 00003128 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6.job
2015-10-04 21:26 - 2015-10-06 15:26 - 00003128 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-7.job
2015-10-04 21:26 - 2015-10-06 15:26 - 00002436 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5_user.job
2015-10-04 21:26 - 2015-10-06 15:26 - 00002436 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5.job
2015-10-04 21:26 - 2015-10-06 13:11 - 00001012 _____ C:\Windows\Tasks\qmKnKxZOiKwp192d4S8lxBYl.job
2015-10-04 21:26 - 2015-10-04 21:26 - 00006158 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-7
2015-10-04 21:26 - 2015-10-04 21:26 - 00006156 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6
2015-10-04 21:26 - 2015-10-04 21:26 - 00005466 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5
2015-10-04 21:26 - 2015-10-04 21:26 - 00004236 _____ C:\Windows\System32\Tasks\SMW_UpdateTask_Time_313139303630333836352d45372a5a506c41324a345741
2015-10-04 21:26 - 2015-10-04 21:26 - 00004038 _____ C:\Windows\System32\Tasks\qmKnKxZOiKwp192d4S8lxBYl
2015-10-04 21:26 - 2015-10-04 21:26 - 00003526 _____ C:\Windows\System32\Tasks\Inst_Rep
2015-10-04 21:26 - 2015-10-04 21:26 - 00000000 ____D C:\ProgramData\SearchModule
2015-10-04 21:26 - 2015-10-04 21:26 - 00000000 ____D C:\Program Files\Common Files\Goobzo
2015-10-04 21:25 - 2015-10-06 20:45 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-10-04 21:25 - 2015-10-06 20:40 - 00000990 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-10-04 21:25 - 2015-10-06 20:40 - 00000000 ____D C:\Program Files (x86)\globalUpdate
2015-10-04 21:25 - 2015-10-06 20:38 - 00005508 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-6.job
2015-10-04 21:25 - 2015-10-06 15:25 - 00005174 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-11.job
2015-10-04 21:25 - 2015-10-06 15:25 - 00005172 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-7.job
2015-10-04 21:25 - 2015-10-06 15:25 - 00004148 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-3.job
2015-10-04 21:25 - 2015-10-06 13:50 - 00000994 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-10-04 21:25 - 2015-10-06 13:45 - 00003992 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-10-04 21:25 - 2015-10-06 13:45 - 00003738 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-10-04 21:25 - 2015-10-05 06:16 - 00002102 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-10_user.job
2015-10-04 21:25 - 2015-10-04 22:07 - 00000000 ____D C:\Program Files (x86)\CinemaP-1.9cV04.10
2015-10-04 21:25 - 2015-10-04 21:25 - 00008536 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-6
2015-10-04 21:25 - 2015-10-04 21:25 - 00008204 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-11
2015-10-04 21:25 - 2015-10-04 21:25 - 00008202 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-7
2015-10-04 21:25 - 2015-10-04 21:25 - 00007178 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-3
2015-10-04 21:25 - 2015-10-04 21:25 - 00000000 ____D C:\Users\Abi\AppData\Local\globalUpdate
2015-10-04 21:25 - 2015-10-04 21:25 - 00000000 ____D C:\Program Files (x86)\119312c4-11b3-4129-ab16-95e16f122005
2015-10-04 21:24 - 2015-10-04 21:24 - 00004186 _____ C:\Windows\System32\Tasks\SwiftSearch Auto Updater 1.10.0.25 Pending Update
2015-10-04 21:24 - 2015-10-04 21:24 - 00004174 _____ C:\Windows\System32\Tasks\SwiftSearch Auto Updater 1.10.0.25 Core
2015-10-04 21:23 - 2015-10-04 21:24 - 00000000 ____D C:\Program Files (x86)\SwiftSearch_1.10.0.25
2015-10-04 21:20 - 2015-10-05 18:27 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Opera Software
2015-10-04 21:20 - 2015-10-05 18:27 - 00000000 ____D C:\Users\Abi\AppData\Local\Opera Software
2015-10-04 21:20 - 2015-10-05 18:27 - 00000000 ____D C:\Program Files (x86)\Opera
2015-10-04 21:20 - 2015-10-04 21:25 - 00000000 ____D C:\Users\Abi\AppData\Local\A0FEA676-1443993646-E111-9F63-E98E551D30CD
2015-10-04 21:20 - 2009-06-10 17:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-10-04 21:19 - 2015-10-06 15:11 - 00000000 ____D C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD
2015-10-04 21:19 - 2015-10-05 12:27 - 00000000 ____D C:\Users\Abi\AppData\Roaming\ASPackage
2015-10-04 21:19 - 2015-10-04 21:19 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage
2015-10-04 21:19 - 2015-10-04 21:19 - 00000000 ____D C:\Users\Abi\AppData\Local\Geckofx
2015-10-04 21:18 - 2015-10-04 21:18 - 00000000 ____D C:\Users\Abi\AppData\Roaming\proical
2015-10-04 21:17 - 2015-10-04 21:27 - 00000000 ____D C:\Program Files (x86)\KMSPico 10.0.6
2015-10-04 21:17 - 2015-10-04 21:18 - 00000000 ____D C:\Users\Abi\AppData\Roaming\SSN
2015-10-03 16:19 - 2015-10-03 16:19 - 00001008 _____ C:\Users\Public\Desktop\LockDown Browser FOL.lnk
2015-10-03 16:19 - 2015-10-03 16:19 - 00000000 ____D C:\Program Files (x86)\Respondus
2015-10-03 16:16 - 2015-10-03 16:17 - 56749720 _____ (Respondus, Inc.) C:\Users\Abi\Downloads\LockDownBrowser-200-02.exe
2015-10-02 14:42 - 2015-10-02 14:42 - 00000000 ____D C:\Users\Abi\AppData\Local\{2319E2F5-D64B-4A67-A7CC-AAFC35C207EC}
2015-10-02 11:41 - 2015-10-02 11:41 - 00186880 _____ (TODO: <Company name>) C:\Windows\system32\rsrcs.dll
2015-10-01 21:53 - 2015-10-01 21:53 - 04032512 _____ C:\Users\Abi\Downloads\0176509739_386709.ppt
2015-09-23 19:48 - 2015-09-23 19:48 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Awesomium
2015-09-22 17:41 - 2015-09-22 17:41 - 00061304 _____ (SS) C:\Windows\system32\Drivers\swsedrvr_vt_1_10_0_25.sys
2015-09-22 17:41 - 2015-09-22 17:41 - 00057720 _____ (SS) C:\Windows\system32\Drivers\swsedrvr_vw_1_10_0_25.sys
2015-09-22 09:30 - 2015-09-22 09:30 - 00022641 _____ C:\Users\Abi\Downloads\receipt for Sept 13.zip
2015-09-21 19:19 - 2015-09-21 19:19 - 00387071 _____ C:\Users\Abi\Downloads\Sheri chp2 PPT6 Correcting Entries.pptx
2015-09-21 19:18 - 2015-09-21 19:18 - 01309276 _____ C:\Users\Abi\Downloads\Sheri chp1 PPT5 Financial Statements.pptx
2015-09-21 19:18 - 2015-09-21 19:18 - 00539375 _____ C:\Users\Abi\Downloads\Sheri chp2 PPT4 Posting.pptx
2015-09-21 19:18 - 2015-09-21 19:18 - 00392069 _____ C:\Users\Abi\Downloads\Sheri chp2 PPT5 Unadjusted Trial Balance.pptx
2015-09-21 19:17 - 2015-09-21 19:17 - 01575824 _____ C:\Users\Abi\Downloads\Sheri chp2 PPT3 Journalizing.pptx
2015-09-21 19:17 - 2015-09-21 19:17 - 01086144 _____ C:\Users\Abi\Downloads\Sheri chp2 PPT2 The Double Entry Accounting System.pptx
2015-09-21 19:17 - 2015-09-21 19:17 - 01060913 _____ C:\Users\Abi\Downloads\Sheri chp2 ppt1 Analyizing Transactions.pptx
2015-09-18 16:18 - 2015-09-18 16:19 - 88847328 _____ C:\Users\Abi\Downloads\PhotoPass_20150918_55fc70a06287e_3.zip
2015-09-18 16:16 - 2015-09-18 16:19 - 164912544 _____ C:\Users\Abi\Downloads\PhotoPass_20150918_55fc70a06287e_4.zip
2015-09-18 16:15 - 2015-09-18 16:19 - 164912544 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_4 (4).zip
2015-09-18 16:15 - 2015-09-18 16:19 - 151613672 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_1 (6).zip
2015-09-18 16:15 - 2015-09-18 16:19 - 149921556 _____ C:\Users\Abi\Downloads\PhotoPass_20150918_55fc70a06287e_1.zip
2015-09-18 16:15 - 2015-09-18 16:18 - 124142712 _____ C:\Users\Abi\Downloads\PhotoPass_20150918_55fc70a06287e_2.zip
2015-09-18 16:15 - 2015-09-18 16:18 - 123003816 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_2 (3).zip
2015-09-18 16:15 - 2015-09-18 16:16 - 45656825 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_3 (4).zip
2015-09-16 16:58 - 2015-09-16 16:59 - 164912544 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_4 (3).zip
2015-09-16 16:57 - 2015-09-16 16:57 - 45656825 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_3 (3).zip
2015-09-16 16:55 - 2015-09-16 16:58 - 164912544 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_4 (2).zip
2015-09-16 16:55 - 2015-09-16 16:58 - 123003816 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_2 (2).zip
2015-09-16 16:55 - 2015-09-16 16:57 - 151613672 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_1 (5).zip
2015-09-16 16:55 - 2015-09-16 16:55 - 45656825 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_3 (2).zip
2015-09-16 16:54 - 2015-09-16 16:57 - 151613672 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_1 (4).zip
2015-09-16 16:52 - 2015-09-16 16:53 - 151613672 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_1 (3).zip
2015-09-14 19:37 - 2015-09-14 19:37 - 01086144 _____ C:\Users\Abi\Downloads\Sheri+chp2+PPT2+The+Double+Entry+Accounting+System.pptx
2015-09-12 16:12 - 2015-09-12 16:12 - 01060913 _____ C:\Users\Abi\Downloads\Sheri+chp2+ppt1+Analyizing+Transactions.pptx
2015-09-12 16:09 - 2015-09-12 16:09 - 00065296 _____ C:\Users\Abi\Downloads\Sheri+chp1+PPT3+The+Accounting+Equation.pptx
2015-09-12 16:08 - 2015-09-12 16:08 - 00323754 _____ C:\Users\Abi\Downloads\Sheri+chp1+PPT4+Recording+Business+Transactions.pptx
2015-09-09 20:32 - 2015-09-09 20:32 - 03036691 _____ C:\Users\Abi\Downloads\ADMN-1014+Getting+Started+_Online.pptx
2015-09-09 20:27 - 2015-09-09 20:27 - 02980659 _____ C:\Users\Abi\Downloads\ADMN-1014+Course+Introduction_Online.pptx
2015-09-08 14:05 - 2015-09-08 14:05 - 02980659 _____ C:\Users\Abi\Downloads\ADMN-1014 Course Introduction_Online.pptx
2015-09-07 15:53 - 2015-09-07 15:53 - 00000000 ____D C:\Users\Abi\Documents\Paradigm
2015-09-07 15:53 - 2015-09-07 15:53 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Paradigm
2015-09-07 15:51 - 2015-10-06 20:38 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-07 15:51 - 2015-10-03 16:19 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-09-07 15:51 - 2015-09-07 15:51 - 00002771 _____ C:\Users\Public\Desktop\Launch Online Lab.lnk
2015-09-07 15:51 - 2015-09-07 15:51 - 00000000 ____D C:\ProgramData\Paradigm
2015-09-07 15:51 - 2015-09-07 15:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paradigm
2015-09-07 15:51 - 2015-09-07 15:51 - 00000000 ____D C:\Program Files (x86)\Paradigm
2015-09-07 14:56 - 2015-09-07 14:56 - 00764562 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-09-07 14:44 - 2015-09-07 14:44 - 00889416 _____ (Microsoft Corporation) C:\Users\Abi\Downloads\dotNetFx40_Full_setup.exe
2015-09-07 14:42 - 2015-09-07 14:42 - 30893992 _____ (Paradigm) C:\Users\Abi\Downloads\keyboarding6e2013.exe
2015-09-07 14:35 - 2015-09-07 14:35 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2015-09-07 14:35 - 2015-09-07 14:35 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2015-09-07 14:34 - 2015-09-07 14:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-09-07 14:33 - 2015-09-07 14:35 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2015-09-07 14:33 - 2015-09-07 14:33 - 00000000 ____D C:\Windows\PCHEALTH
2015-09-07 14:30 - 2015-09-07 14:30 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2015-09-07 14:30 - 2015-09-07 14:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2015-09-07 14:29 - 2015-09-07 14:33 - 00000000 ____D C:\Program Files\Microsoft Office
2015-09-06 21:53 - 2015-09-06 21:53 - 00000000 ____D C:\Users\Abi\Downloads\PREACTIVATED WINDOWS 7 + WINDOWS 8.1 +OFFICE 2013 PRO PLUS
2015-09-06 21:52 - 2015-09-06 21:52 - 00733005 _____ C:\Users\Abi\Downloads\PREACTIVATED_WINDOWS_7_+_WINDOWS_8_1_+_OFFICE_2013_PRO_PLUS.torrent
2015-09-06 17:00 - 2015-09-07 14:19 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2015-09-06 16:07 - 2015-09-07 14:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-09-06 11:37 - 2015-09-06 11:37 - 00000000 ____D C:\Users\Abi\Downloads\Microsoft Office 2013 SP1 Pro + Visio + Project + 15.0.4737.1001 RePack by KpoJIuK
2015-09-06 11:36 - 2015-09-06 11:36 - 00029320 _____ C:\Users\Abi\Downloads\28E409E030BECEF170CEBD51EB41C2EDA4B2E316.torrent
2015-09-06 11:35 - 2015-09-06 11:35 - 00002635 _____ C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-09-06 11:34 - 2015-09-07 04:46 - 00000000 ____D C:\Users\Abi\AppData\Roaming\uTorrent
2015-09-06 11:34 - 2015-09-06 11:34 - 01699936 _____ (BitTorrent Inc.) C:\Users\Abi\Downloads\uTorrent.exe
2015-09-06 10:21 - 2015-09-06 10:22 - 151613672 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_1 (2).zip
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-06 20:47 - 2009-07-14 01:13 - 00779018 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-06 20:39 - 2012-11-25 21:20 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-06 20:39 - 2012-09-22 15:08 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Skype
2015-10-06 20:38 - 2012-05-28 10:39 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2015-10-06 20:38 - 2012-05-28 10:33 - 01954797 _____ C:\Windows\WindowsUpdate.log
2015-10-06 15:17 - 2012-12-02 15:49 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-10-06 13:20 - 2009-07-14 00:45 - 00024416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-06 13:20 - 2009-07-14 00:45 - 00024416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-06 13:11 - 2012-11-25 21:21 - 00002475 _____ C:\Users\Abi\Desktop\Google Chrome.lnk
2015-10-06 13:08 - 2012-05-28 10:39 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2015-10-06 13:08 - 2009-07-14 01:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-06 13:07 - 2009-07-14 00:51 - 00063271 _____ C:\Windows\setupact.log
2015-10-05 22:21 - 2012-08-18 19:47 - 00001417 _____ C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-10-05 21:52 - 2014-03-30 11:33 - 00000000 ____D C:\Users\Abi\AppData\Roaming\DesktopIconForAmazon
2015-10-05 18:35 - 2015-07-31 15:11 - 00000000 ____D C:\Program Files\Common Files\AV
2015-10-05 18:31 - 2009-07-13 22:34 - 00450771 ____R C:\Windows\system32\Drivers\etc\hosts.20151005-214925.backup
2015-10-05 12:27 - 2009-07-14 01:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-10-05 06:17 - 2009-07-14 00:45 - 00459216 _____ C:\Windows\system32\FNTCACHE.DAT
2015-10-04 22:55 - 2015-04-19 08:20 - 00000626 _____ C:\Users\Abi\AppData\Roaming\qmKnKxZOiKwp192d4S8lxBYl
2015-10-04 21:30 - 2012-04-04 03:23 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2015-10-04 21:30 - 2012-04-04 03:23 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2015-10-04 21:27 - 2012-10-21 10:44 - 00000000 ____D C:\Users\Abi\AppData\Local\CrashDumps
2015-10-04 21:25 - 2012-04-04 04:20 - 00000000 ____D C:\Program Files (x86)\Acer
2015-10-04 10:36 - 2015-01-02 17:12 - 00044433 _____ C:\Users\Abi\Documents\Bills 2014 2015.xlsx
2015-10-03 16:19 - 2015-01-03 16:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Respondus
2015-10-03 16:19 - 2015-01-03 16:13 - 00000000 ____D C:\Program Files (x86)\Respondus LockDown Browser
2015-10-03 16:19 - 2012-04-04 03:56 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-10-03 16:19 - 2012-04-04 03:51 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-03 16:19 - 2012-04-04 03:51 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-03 16:10 - 2012-11-25 21:20 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-10-03 16:10 - 2012-05-28 10:39 - 00003492 _____ C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d
2015-10-01 21:12 - 2013-08-22 18:18 - 00000000 ____D C:\Users\Abi\Documents\Christmas
2015-09-24 14:01 - 2012-09-02 12:25 - 00000000 ____D C:\Users\Abi\AppData\Local\Microsoft Help
2015-09-16 11:14 - 2012-11-25 21:20 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-16 11:14 - 2012-11-25 21:20 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-13 17:02 - 2012-11-25 14:24 - 00000000 ____D C:\Users\Abi\AppData\Local\Google
2015-09-10 14:40 - 2012-08-18 19:43 - 00113928 _____ C:\Users\Abi\AppData\Local\GDIPFONTCACHEV1.DAT
2015-09-09 11:41 - 2012-09-10 18:43 - 00000000 ____D C:\Users\Abi\Documents\School
2015-09-07 16:37 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\rescache
2015-09-07 14:38 - 2012-09-02 12:25 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-09-07 14:35 - 2012-04-04 04:10 - 00000000 ____D C:\Windows\ShellNew
2015-09-07 14:35 - 2009-07-13 23:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-09-07 14:31 - 2009-07-13 23:20 - 00000000 ____D C:\Program Files\Common Files\System
2015-09-07 14:31 - 2009-07-13 22:34 - 00000510 _____ C:\Windows\win.ini
2015-09-07 14:29 - 2012-05-28 11:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-09-07 14:22 - 2010-11-20 23:47 - 00374284 _____ C:\Windows\PFRO.log
2015-09-07 14:19 - 2012-04-04 04:18 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-09-07 14:17 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-09-07 13:44 - 2012-04-04 03:54 - 00001024 ___RH C:\Users\Public\Documents\NTIMMV9Acer.dll
2015-09-07 13:35 - 2012-04-04 03:56 - 00001024 ___RH C:\Users\Public\Documents\NTILiveUpdateV9.dll
2015-09-07 13:28 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-09-07 05:04 - 2014-01-22 22:32 - 00000000 ____D C:\Windows\system32\MRT
2015-09-06 09:47 - 2015-05-04 18:22 - 00000000 ____D C:\Users\Abi\AppData\Local\Windows Live
==================== Files in the root of some directories =======
2015-04-19 08:20 - 2015-04-19 08:20 - 0005872 _____ () C:\Users\Abi\AppData\Roaming\ORGJcze6Wh9asiLsOyqhOX
2015-04-20 10:05 - 2015-04-20 10:05 - 1579520 _____ () C:\Users\Abi\AppData\Roaming\ORGJcze6Wh9asiLsOyqhOX.exe
2015-04-19 08:20 - 2015-10-04 22:55 - 0000626 _____ () C:\Users\Abi\AppData\Roaming\qmKnKxZOiKwp192d4S8lxBYl
2015-04-20 10:05 - 2015-04-20 10:05 - 1579520 _____ () C:\Users\Abi\AppData\Roaming\qmKnKxZOiKwp192d4S8lxBYl.exe
2015-10-06 13:46 - 2015-10-06 13:46 - 0613255 _____ (CMI Limited) C:\Users\Abi\AppData\Local\nsp2B0E.tmp
2015-08-17 13:20 - 2015-08-17 13:20 - 0000851 _____ () C:\Users\Abi\AppData\Local\recently-used.xbel
2012-05-28 10:50 - 2012-05-28 10:53 - 0002454 _____ () C:\ProgramData\clear.fiSDK20.log
2012-05-28 10:51 - 2012-05-28 10:51 - 0000032 _____ () C:\ProgramData\PS.log
Some files in TEMP:
====================
C:\Users\Abi\AppData\Local\Temp\2203.exe
C:\Users\Abi\AppData\Local\Temp\6974.exe
C:\Users\Abi\AppData\Local\Temp\ose00000.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll
[2012-04-04 03:23] - [2015-10-04 21:30] - 0357888 ____A (Microsoft Corporation) F5411C5B71CD5077B30987CFC5C91B66
C:\Windows\SysWOW64\dnsapi.dll
[2012-04-04 03:23] - [2015-10-04 21:30] - 0270336 ____A (Microsoft Corporation) BDFB2EE32909A89B551EE92441316294
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-10-01 13:31
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version:04-10-2015
Ran by Abi (2015-10-06 20:48:38)
Running from C:\Users\Abi\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2012-08-18 23:41:56)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Abi (S-1-5-21-1835340503-273950527-3103715778-1001 - Administrator - Enabled) => C:\Users\Abi
Administrator (S-1-5-21-1835340503-273950527-3103715778-500 - Administrator - Disabled)
Guest (S-1-5-21-1835340503-273950527-3103715778-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1835340503-273950527-3103715778-1002 - Limited - Enabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\uTorrent) (Version: 3.4.4.40911 - BitTorrent Inc.)
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.100 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.2728.00 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.5.2728.00 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3010 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3507 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Instant Update Service (HKLM\...\{682EC6E8-A300-45FD-8F09-0F3A6EA334D6}) (Version: 1.00.3004 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 20.11.1107.1418 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.4.402.287 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Reader X (10.1.6) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.6 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
AnyProtect (HKLM-x32\...\AnyProtect) (Version: 1.0.0.4 - CMI Limited) <==== ATTENTION
AnySend (HKLM-x32\...\ASPackage) (Version: - CMI Limited) <==== ATTENTION
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.126 - Atheros)
Atheros Driver Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Atheros)
Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.3.2225 - AVAST Software)
Backup Manager V3 (x32 Version: 3.0.0.100 - NTI Corporation) Hidden
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Chronicles of Albian (x32 Version: 2.2.0.95 - WildTangent) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
CinemaP-1.9cV04.10 (HKLM-x32\...\CinemaP-1.9cV04.10) (Version: 1.36.01.22 - Cinema PlusV04.10) <==== ATTENTION
CinemaPlus-3.2cV04.10 (HKLM-x32\...\CinemaPlus-3.2cV04.10) (Version: 1.36.01.22 - Cinema PlusV04.10) <==== ATTENTION
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated)
clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden
Cradle of Rome 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Crossbrowse (HKLM-x32\...\Crossbrowse) (Version: 39.6.2171.95 - The Crossbrowse Authors) <==== ATTENTION
CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1720_38230 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.7 - Dolby Laboratories Inc)
Dora's World Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink)
DVDFab 9.2.0.2 (10/06/2015) Non-Decryption (HKLM-x32\...\DVDFab 9 NonDecALL_is1) (Version: - Fengtao Software Inc.)
ETDWare PS/2-X64 10.6.9.8_WHQL (HKLM\...\Elantech) (Version: 10.6.9.8 - ELAN Microelectronic Corp.)
Evernote v. 4.5.2 (HKLM-x32\...\{F77EF646-19EB-11E1-9A9E-984BE15F174E}) (Version: 4.5.2.5866 - Evernote Corp.)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Feed Notifier 2.6 (HKLM-x32\...\{6091F327-2B13-4193-A6F1-4B2271613A74}_is1) (Version: - Michael Fogleman)
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fooz Kids (HKLM-x32\...\FoozKids) (Version: 3.1.2 - FUHU, Inc.)
Fooz Kids (x32 Version: 3.1.2 - FUHU, Inc.) Hidden
Fooz Kids Platform (HKLM-x32\...\{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}) (Version: 2.1 - FUHU, Inc.)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
GamesDesktop 026.005010107 (HKLM-x32\...\gmsd_ca_005010107_is1) (Version: - GAMESDESKTOP) <==== ATTENTION
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.101 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.95 - WildTangent) Hidden
HandBrake 0.10.2 (HKLM-x32\...\HandBrake) (Version: 0.10.2 - )
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.4.1441 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
jogotempo 3.4 (HKLM-x32\...\jogotempo) (Version: 3.4 - DN)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KeyStream (HKLM-x32\...\KeyStream) (Version: - )
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.15 - Acer Inc.)
MakeMKV v1.8.10 (HKLM-x32\...\MakeMKV) (Version: v1.8.10 - GuinpinSoft inc)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MyBrowser 1.0.2V06.10 (HKLM-x32\...\MyBrowser 1.0.2V06.10) (Version: 1.36.01.22 - MyBrowser 1.0.2V06.10)
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
Noticeboard Renew (HKLM-x32\...\SoftwareUpdater) (Version: 1.0.0.0 - Noticeboard Renew)
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9006 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9006 - NTI Corporation) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Paradigm Keyboarding (HKLM-x32\...\{07ccd1ce-3d4a-4ec1-a4a2-e08ff97db84c}) (Version: 6.2.12 - Paradigm)
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.98 - WildTangent) Hidden
proical (HKLM-x32\...\{94a7f28f-1a35-490e-8bda-daf7e804e645}) (Version: 1.0.0 - citadex) <==== ATTENTION
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.54.309.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6577 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.27015 - Realtek Semiconductor Corp.)
Respondus LockDown Browser (HKLM-x32\...\{C0E5147E-C9F3-4360-9ED0-2E875F11766C}) (Version: 1.02.0001 - Respondus, Inc.)
Respondus LockDown Browser 2 (HKLM-x32\...\{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}) (Version: 2.00.0000 - Respondus)
Search module (HKLM-x32\...\Search module) (Version: - Goobzo)
Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - )
shopperz (HKLM\...\{93F8D5C2-0BF6-4315-9316-AA5FC9948AC5}_is1) (Version: 2.0.0.475 - shopperz) <==== ATTENTION
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
SmartWeb (HKLM-x32\...\SmartWeb) (Version: 8.0.9 - SoftBrain Technologies Ltd.) <==== ATTENTION
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
SSN (HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Save Serp Now) (Version: 1.05 - SSN Corp) <==== ATTENTION
SwiftSearch 1.10.0.25 (HKLM-x32\...\SwiftSearch_1.10.0.25) (Version: 1.10.0.25 - SwiftSearch)
Tales of Lagoona (x32 Version: 2.2.0.98 - WildTangent) Hidden
Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 3.2.2 - Tweaking.com)
Update for Skype for Business 2015 (KB2889853) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0409-0000-0000000FF1CE}_Office15.PROPLUS_{BF1B3F01-93F3-4B83-93DB-132EB1AED259}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB2889853) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0419-0000-0000000FF1CE}_Office15.PROPLUS_{60CB2530-FFDB-4506-9B1D-3E82A0D8F55F}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB2889853) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0422-0000-0000000FF1CE}_Office15.PROPLUS_{88ED957B-9B08-4B2A-92C3-225527A6BB48}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{9BBF212C-5BD8-4C8A-B65F-91342D904ED8}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{9BBF212C-5BD8-4C8A-B65F-91342D904ED8}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0409-0000-0000000FF1CE}_Office15.PROPLUS_{9BBF212C-5BD8-4C8A-B65F-91342D904ED8}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0419-0000-0000000FF1CE}_Office15.PROPLUS_{9BBF212C-5BD8-4C8A-B65F-91342D904ED8}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0422-0000-0000000FF1CE}_Office15.PROPLUS_{9BBF212C-5BD8-4C8A-B65F-91342D904ED8}) (Version: - Microsoft)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Virtual Villagers 5 - New Believers (x32 Version: 2.2.0.97 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated)
WildTangent Games App (Acer Games) (x32 Version: 4.0.5.32 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1835340503-273950527-3103715778-1001_Classes\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}\InprocServer32 -> C:\Users\Abi\AppData\Roaming\proical\comanmin.dll () <==== ATTENTION
==================== Restore Points =========================
ATTENTION: System Restore is disabled
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 22:34 - 2015-10-05 21:49 - 00450771 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0568B927-97F8-4E63-A3D6-12424505FB86} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5_user => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-5.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {062F4E0A-EC63-435B-B245-F6F446086ED7} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-7 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-7.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {0A81DB0A-86CF-45FE-A6D8-4D3F2C8ED9FF} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: {1F7D7EE0-9989-4BAC-9F23-F64E8852D7A5} - System32\Tasks\bvxvexvbg => C:\Users\Abi\AppData\Local\bvxvexvbg\bvxvexvbg.exe [2015-09-21] () <==== ATTENTION
Task: {228BF3CF-98F1-44CA-BC78-50BA21B3C262} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {261C7A06-6327-441E-BF45-76819A4240ED} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-7 => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-7.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {2981835A-DE0D-4630-BB66-D5D214EF84A7} - System32\Tasks\Crossbrowse => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe [2015-10-06] () <==== ATTENTION
Task: {3399F2EA-ECA2-41A9-8A60-C4FD4A96FAEF} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-7 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-1-7.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {3E73F48D-810A-4622-8B7F-EF49AD832C7C} - System32\Tasks\qmKnKxZOiKwp192d4S8lxBYl => C:\Users\Abi\AppData\Roaming\qmKnKxZOiKwp192d4S8lxBYl.exe [2015-04-20] () <==== ATTENTION
Task: {46684C09-6A11-4F6A-A0E7-DB3A31730BBE} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-06] (Acer Incorporated)
Task: {4F96D115-B397-4AB7-9FB2-96BF5C3FF2CD} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\Cyberlink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2011-05-20] (CyberLink)
Task: {516FE8C3-447D-4660-944B-8DB95DFAD780} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-6 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-6.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {54FCB97E-2F03-44CD-A8B0-BE92EBFD1992} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-11 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-11.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {5C061765-DDA2-45D9-B39D-DB1FD3222DB7} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-10-06] (AnyProtect.com) <==== ATTENTION
Task: {5D98FF86-CF5E-403D-88A0-E2C52B8438DE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.)
Task: {652A310C-8C03-42C2-BC01-90A4CEAF1C6E} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-10-06] (AnyProtect.com) <==== ATTENTION
Task: {6A4ACB52-9C44-40D6-BC52-54DD49537F16} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {6B9DF09A-F399-4FA4-AFD4-07335F60F3C6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {71957BC3-0E7B-42B4-B6E8-F9AD6C3E7464} - System32\Tasks\ORGJcze6Wh9asiLsOyqhOX => C:\Users\Abi\AppData\Roaming\ORGJcze6Wh9asiLsOyqhOX.exe [2015-04-20] () <==== ATTENTION
Task: {75DF3501-E6DC-42A1-A00A-189EA483F493} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-7 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-7.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {786257AB-1ACF-4D9E-8467-196505D705F9} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: {833BB259-E9DF-4EC5-AD01-3C52A2DD693B} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-08-14] (AVAST Software)
Task: {85A05D18-A0AE-4DFA-B9CF-3E8067EC21AF} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-7 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-7.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {8A3DB2CA-F49F-4299-B5E2-F904AA641562} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {8B76CDE7-8F3D-47D4-93DA-0D13D3A98474} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-11 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-11.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {8B86FC70-581D-42A6-8DAE-8D2CC33AAA50} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5_user => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {94FF0B3A-9FFF-4517-A30A-8A1E901F1744} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {96C61418-12D0-4B93-A244-135B7D654DAF} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-7 => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-7.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {9929A2DF-2F18-4D57-8E79-086EE9CABCC3} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {9DE221A6-2A7C-4E33-A67F-C84D7FC11DE2} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5_user => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-5.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {A5D5BFC1-764F-435A-81BA-9F2C19E5BDD3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.)
Task: {A6A8B4A1-16A9-4A22-A15A-1C9D9D98DD55} - System32\Tasks\SMW_UpdateTask_Time_313139303630333836352d45372a5a506c41324a345741 => Wscript.exe //B "C:\ProgramData\SearchModule\smhe.js" smu.exe /invoke /f:check_services /l:0 <==== ATTENTION
Task: {A6AA2A0A-AC7D-4FC7-BE73-9A1F73B49381} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-08-09] (AVAST Software)
Task: {A6D7E3E5-4795-4788-BBE7-905370F6162C} - System32\Tasks\SwiftSearch Auto Updater 1.10.0.25 Core => C:\Program Files (x86)\SwiftSearch_1.10.0.25\Update\SwiftSearchAutoUpdateClient.exe [2015-09-22] (SS)
Task: {B1A33D93-AB6B-424E-BD76-887D2444541F} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-10-06] (AnyProtect.com) <==== ATTENTION
Task: {B2F708ED-5569-4DB5-8A04-D00661307C4B} - System32\Tasks\Delhivv => C:\Program Files\shopperz011020151101\Jewai.bat [2015-10-01] () <==== ATTENTION
Task: {B800BE4F-B4A6-4F0B-8519-8C5272F264FE} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-5.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {BFFB12DE-2C65-4DF3-A85F-48939B6BEBDB} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2011-03-28] (Egis Technology Inc.)
Task: {C28D81B6-681A-4EB9-AF69-A25388AAA93C} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-3 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-3.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {C602CC11-0D91-4BDF-83AB-0EF1DBEADFB0} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-6 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-1-6.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {CB1CBFC9-55FC-4CE3-AEF2-3555EF270044} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-3 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-3.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {CC21B690-1935-467F-85E2-3C01F354B46B} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-5.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {D1BB3A9F-031C-44BB-B02A-B97087828686} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-03] (Adobe Systems Incorporated)
Task: {D2E681EA-5C42-43DC-BEAA-12B41AF92790} - System32\Tasks\SwiftSearch Auto Updater 1.10.0.25 Pending Update => C:\Program Files (x86)\SwiftSearch_1.10.0.25\Update\SwiftSearchAutoUpdateClient.exe [2015-09-22] (SS)
Task: {DA709299-9D01-49DB-AB79-DAB7951E5FA6} - System32\Tasks\Inst_Rep => C:\Users\Abi\AppData\Local\Installer\Install_30959\brakietut_tutbl_setup.exe [2015-10-04] ()
Task: {DC83EA6A-ADAA-42B0-8951-F1C723DF2B43} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-3 => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-3.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {E2ABDB3E-F2EC-48B3-A27C-61D611129605} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {E9326D63-CB15-46AF-AA82-5C3F0A89330A} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10_user => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {E996977D-816E-4E08-9381-076FAB763156} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {EBEDE228-8DCE-40FB-A5D7-021967AC76D1} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5 => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {EE2AF5C6-1468-4C9A-8549-1C7B5E01AFB4} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {EF010618-947F-4F0B-9DCF-DF05ADFEC634} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2011-03-28] (Egis Technology Inc.)
Task: {F2569539-3DA6-456C-9BF5-ED2AB7E1547E} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6 => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {FA0FAAED-6233-47E6-8046-A9F90A421B77} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-6 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-6.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {FBEE81D9-B7B2-46A6-9680-271B6C389E2C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {FCB5455C-08DF-4A19-A083-30CDB5A58517} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6 => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-7.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-10_user.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-11.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-3.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5_user.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-6.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-7.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-10_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-11.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-3.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\Crossbrowse.job => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-7.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10_user.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-3.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5_user.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-7.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ORGJcze6Wh9asiLsOyqhOX.job => C:\Users\Abi\AppData\Roaming\ORGJcze6Wh9asiLsOyqhOX.exe <==== ATTENTION
Task: C:\Windows\Tasks\qmKnKxZOiKwp192d4S8lxBYl.job => C:\Users\Abi\AppData\Roaming\qmKnKxZOiKwp192d4S8lxBYl.exe <==== ATTENTION
Task: C:\Windows\Tasks\yxnb.job => C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\tsmfh.dll
==================== Loaded Modules (Whitelisted) ==============
2012-10-01 20:36 - 2012-10-01 20:36 - 06522480 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2009-01-21 19:45 - 2009-01-21 19:45 - 01401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll
2015-09-30 11:57 - 2015-10-04 21:19 - 00161280 _____ () C:\Users\Abi\AppData\Roaming\proical\comanmin.dll
2015-10-04 21:20 - 2015-10-04 21:20 - 00203776 _____ () C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD\hnsfFB53.tmp
2012-05-28 11:08 - 2012-03-26 21:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-05-28 10:39 - 2012-03-16 07:48 - 00127320 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2015-10-04 21:30 - 2015-07-08 21:26 - 00173088 _____ () C:\Users\Abi\AppData\Roaming\NetService\netservice.exe
2015-10-04 21:30 - 2015-10-01 11:05 - 00171200 _____ () C:\Program Files\shopperz011020151101\Vubficvh.exe
2012-04-06 23:29 - 2012-04-06 23:29 - 00040552 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
2012-04-06 23:29 - 2012-04-06 23:29 - 00022120 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
2015-10-01 04:03 - 2015-10-01 04:03 - 02024808 _____ () C:\Program Files\shopperz011020151101\Kixjucfio.exe
2015-10-04 21:30 - 2015-10-01 11:05 - 01444544 _____ () C:\Program Files\shopperz011020151101\csrcc.exe
2015-10-06 13:45 - 2015-10-05 09:49 - 03300496 _____ () C:\Users\Abi\AppData\Local\gmsd_ca_005010107\upgmsd_ca_005010107.exe
2015-10-06 13:45 - 2015-10-05 09:49 - 03976336 _____ () C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
2015-10-06 13:46 - 2015-10-06 13:46 - 00228674 _____ () C:\Users\Abi\AppData\Local\Temp\nso9DF5.tmp
2015-10-06 14:20 - 2015-10-06 14:20 - 00396288 _____ () C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD\knsqCB46.tmp
2014-11-21 08:53 - 2014-11-21 08:53 - 00033792 _____ () C:\Users\Abi\AppData\Roaming\ssn\ssn.exe
2011-12-23 13:24 - 2011-12-23 13:24 - 00119808 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
2015-08-14 13:47 - 2015-08-14 13:47 - 00102864 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-08-14 13:47 - 2015-08-14 13:47 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-10-05 17:14 - 2015-10-05 17:14 - 02966528 _____ () C:\Program Files\AVAST Software\Avast\defs\15100501\algo.dll
2015-10-06 15:14 - 2015-10-06 15:14 - 02967040 _____ () C:\Program Files\AVAST Software\Avast\defs\15100601\algo.dll
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-01-05 17:22 - 2012-01-05 17:22 - 00465344 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-01-05 17:22 - 2012-01-05 17:22 - 01081368 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2012-01-05 17:22 - 2012-01-05 17:22 - 00125464 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2015-10-05 18:23 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-10-05 18:23 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2015-10-05 18:23 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-10-05 18:23 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2015-10-05 18:23 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2015-08-14 13:47 - 2015-08-14 13:47 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-09-30 11:57 - 2015-10-04 21:19 - 00134656 _____ () C:\Users\Abi\AppData\Roaming\proical\daycol.dll
2012-05-28 10:38 - 2012-03-07 10:27 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-10-06 13:44 - 2015-05-12 07:01 - 01070592 _____ () C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libglesv2.dll
2015-10-06 13:44 - 2015-05-12 07:01 - 00204800 _____ () C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libegl.dll
2015-10-06 13:44 - 2015-05-12 07:01 - 09003008 _____ () C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\pdf.dll
2015-10-06 13:44 - 2015-05-12 07:01 - 00896512 _____ () C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\ffmpegsumo.dll
2015-10-06 13:46 - 2015-10-06 13:46 - 00011264 _____ () C:\Users\Abi\AppData\Local\Temp\nsuAA25.tmp\System.dll
2015-10-06 13:46 - 2015-10-06 13:46 - 00009728 _____ () C:\Users\Abi\AppData\Local\Temp\nsuAA25.tmp\nsDialogs.dll
2015-10-06 13:46 - 2015-10-06 13:46 - 00025088 _____ () C:\Users\Abi\AppData\Local\Temp\nsuAA25.tmp\registry.dll
2015-10-06 13:46 - 2015-10-06 13:46 - 00067584 _____ () C:\Users\Abi\AppData\Local\Temp\nsuAA25.tmp\Math.dll
2015-10-06 13:46 - 2015-10-06 13:46 - 00058368 _____ () C:\Users\Abi\AppData\Local\Temp\nsuAA25.tmp\nsCBHTML5.dll
2014-04-21 16:00 - 2014-04-21 16:00 - 03378688 _____ () C:\Users\Abi\AppData\Roaming\ssn\mozjs.dll
2011-08-15 23:12 - 2011-08-15 23:12 - 02603520 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtCore4.dll
2011-08-17 19:48 - 2011-08-17 19:48 - 00322048 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\log4cplus.dll
2011-08-15 23:15 - 2011-08-15 23:15 - 00382464 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtXml4.dll
2011-08-17 19:48 - 2011-08-17 19:48 - 00195584 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\libgsoap.dll
2011-08-15 22:23 - 2011-08-15 22:23 - 00062464 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\zlib1.dll
2011-11-25 16:24 - 2011-11-25 16:24 - 00071680 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ServiceManagerStarter.dll
2011-08-15 23:12 - 2011-08-15 23:12 - 01006592 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtNetwork4.dll
2011-08-17 19:41 - 2011-08-17 19:41 - 00400384 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\sqlite3.dll
2011-11-25 16:29 - 2011-11-25 16:29 - 00015872 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\featureController.dll
2011-11-25 16:28 - 2011-11-25 16:28 - 00484352 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\DeviceProfile.dll
2011-11-25 16:42 - 2011-11-25 16:42 - 00499976 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\plugin\PServerPlugin.dll
2011-11-25 16:26 - 2011-11-25 16:26 - 00013824 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\eventsSender.dll
2011-07-19 19:05 - 2011-07-19 19:05 - 14978048 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtWebKit4.dll
2011-07-19 19:04 - 2011-07-19 19:04 - 00317952 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\phonon4.dll
2011-08-15 23:17 - 2011-08-15 23:17 - 09224704 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtGui4.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Abi\Desktop\AbiTax.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\AbiTax.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Desktop\babyscan.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\babyscan.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Desktop\matrrsp.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\matrrsp.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Desktop\mattax.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\mattax.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Desktop\member change form.png:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\member change form.png:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Desktop\midwife notes 1.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\midwife notes 1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Desktop\midwife notes 2.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\midwife notes 2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Documents\health card insurance.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Documents\health card insurance.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Documents\health card supplemental.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Documents\health card supplemental.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Documents\meditech registration.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Documents\meditech registration.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Kixjucfio => ""="service"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
There are 7866 more restricted sites.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 82.163.143.162 - 82.163.142.164
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{8FD873D8-2066-4145-A6EA-3E5CA9999762}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{C16BCB7B-1797-4D27-AE2F-CCA5D9973D88}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{0AB6A935-09EA-411C-A307-9A77E2412E29}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{A379F547-BF8A-4B78-B1EC-8A3EC6B9E70B}] => (Allow) LPort=2869
FirewallRules: [{F1811CB8-11D7-4EBD-981A-B31337573DA4}] => (Allow) LPort=1900
FirewallRules: [{4262453D-0716-4ACD-8F19-DB26807F9B27}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{E166EA75-29F0-4D0C-BDCD-8F78CC6393A4}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{ADC0B634-7E7B-4D52-BBE1-9CA84E4CC298}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{16A286E4-E4A8-476D-AB0A-2549B1340571}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe
FirewallRules: [{1E125A22-3769-4B8C-B674-81D0A8D13701}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe
FirewallRules: [{8E2439BF-BD93-4B7F-A36E-D24DF0967F7D}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe
FirewallRules: [{B3BFE238-4A39-4983-A3DA-A92FF52D2C9F}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe
FirewallRules: [{EC564DF5-7E41-4E99-A174-CC6C9FCABE40}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe
FirewallRules: [{E6111690-229E-4C49-9DFF-AFF589063362}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe
FirewallRules: [{212A54F7-9BEF-4AA8-8E94-D6222C51EA20}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe
FirewallRules: [{832240CA-6103-4E8D-A264-8B1A74F61D93}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe
FirewallRules: [{03BE1C9E-8F6C-4E6E-B108-FE25A907A4E5}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK20\Movie\PlayMovie.exe
FirewallRules: [{6504793A-A869-45C7-B9C5-DA1B951CF00D}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK20\MVP\VideoPlayer.exe
FirewallRules: [{5500A754-C22F-4049-A0F9-664EEBB43E46}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK20\MVP\MusicPlayer.exe
FirewallRules: [{2A9DB574-E321-4CC3-97A0-ECB30BA8147D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{05EFD2AA-1D64-4CAA-9006-D3BF26FF778E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2EF53DD5-23A8-4F72-A4C0-E1CAAD27B2DC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3B3908AB-6BF2-4529-A028-C3C2041E8477}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BAE36271-63B2-4DFF-86B7-68D39AD241C7}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{3D73F9BA-CF8E-4551-AABC-585D7F817F8D}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{F79E4460-7D5A-4370-9A64-CEE010DE6206}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{BF322E37-E5EA-436C-AF36-3A4595BC678B}] => (Allow) C:\Users\Abi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B852340F-1685-4D2E-9906-F55B0506E5DD}] => (Allow) C:\Users\Abi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2E732776-CA4E-498C-B962-DFAC8A1FB5FE}] => (Allow) C:\Users\Abi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7EAF9ED6-AB60-4A55-9578-00BAA4BCEE81}] => (Allow) C:\Users\Abi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{24194B42-340B-4CB1-94F5-8CF7C00AEFD5}] => (Allow) C:\Users\Abi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E415A74A-8EE5-473A-A76A-EAA4E3AC9238}] => (Allow) C:\Users\Abi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{5345F8CB-3DC8-46BC-A9E6-FF71B206AAB3}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{BEC52C7D-31D9-4044-8AC0-7E744DBF1EAE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{B7D33C18-3B0F-4D31-8AF9-C270099EDBBE}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{26DF8587-01A5-4261-A680-9C0035D948B2}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{B68C9BEC-795E-4989-8669-F3E5A2DB4FB1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{DE04AFED-2CAF-4DC9-906B-2966B4B80132}] => (Allow) C:\Users\Abi\AppData\Roaming\SSN\ssn.exe
FirewallRules: [{873699D0-7464-4AE3-A3A3-3E5CED42977F}] => (Allow) C:\Users\Abi\AppData\Roaming\SSN\updssn.exe
FirewallRules: [{B9F1B326-EA08-4FE0-BF88-671B5C9AADAE}] => (Allow) C:\Users\Abi\AppData\Local\BrowserAir\Application\BrowserAir.exe
FirewallRules: [{E096DB31-FD1B-4FA8-8A6C-5A6B4211721F}] => (Allow) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Faulty Device Manager Devices =============
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/06/2015 08:38:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 17692541
Error: (10/06/2015 08:38:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 17692541
Error: (10/06/2015 08:38:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/06/2015 03:43:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1279
Error: (10/06/2015 03:43:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1279
Error: (10/06/2015 03:43:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/06/2015 03:38:44 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005
Error: (10/06/2015 02:35:47 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005
Error: (10/06/2015 01:45:58 PM) (Source: MsiInstaller) (EventID: 11316) (User: Abi-Laptop)
Description: Product: globalupdate Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi
Error: (10/05/2015 10:34:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Skype.exe version 6.14.0.104 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 130
Start Time: 01d0ffdde0d220e1
Termination Time: 0
Application Path: C:\Program Files (x86)\Skype\Phone\Skype.exe
Report Id:
System errors:
=============
Error: (10/06/2015 08:44:38 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR2.
Error: (10/06/2015 08:44:37 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR2.
Error: (10/06/2015 08:44:36 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR2.
Error: (10/06/2015 08:40:11 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.
Error: (10/06/2015 01:09:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Spybot-S&D 2 Scanner Service service failed to start due to the following error:
%%1053
Error: (10/06/2015 01:09:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Spybot-S&D 2 Scanner Service service to connect.
Error: (10/05/2015 10:45:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/05/2015 10:45:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/05/2015 10:45:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/05/2015 10:45:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-2367M CPU @ 1.40GHz
Percentage of memory in use: 66%
Total physical RAM: 5937.6 MB
Available physical RAM: 1996.82 MB
Total Virtual: 11873.39 MB
Available Virtual: 7425.08 MB
==================== Drives ================================
Drive c: (ACER) (Fixed) (Total:449.06 GB) (Free:247.12 GB) NTFS
Drive e: (KINGSTON) (Removable) (Total:14.53 GB) (Free:8.56 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 2B273B16)
Partition 1: (Not Active) - (Size=16.6 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=449.1 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 14.5 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=14.5 GB) - (Type=0C)
==================== End of Addition.txt ============================
Any help greatly appreciated.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:04-10-2015
Ran by Abi (administrator) on Abi-Laptop (06-10-2015 20:47:16)
Running from C:\Users\Abi\Desktop
Loaded Profiles: Abi (Available Profiles: Abi)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 10 (Default browser: "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" -- "%1")
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Cinema PlusV04.10) C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-1-6.exe
(Cinema PlusV04.10) C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-6.exe
(Cinema PlusV04.10) C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Cinema PlusV04.10) C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-6.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
() C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD\hnsfFB53.tmp
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\Users\Abi\AppData\Roaming\NetService\netservice.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(CyberLink) C:\Program Files (x86)\Cyberlink\MediaEspresso\DeviceDetector\DeviceDetector.exe
() C:\Program Files\shopperz011020151101\Vubficvh.exe
(SS) C:\Program Files (x86)\SwiftSearch_1.10.0.25\Service\swsesrvc.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files\shopperz011020151101\Kixjucfio.EXE
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\shopperz011020151101\csrcc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(MyBrowser 1.0.2V06.10) C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10.exe
() C:\Users\Abi\AppData\Local\gmsd_ca_005010107\upgmsd_ca_005010107.exe
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
() C:\Users\Abi\AppData\Local\Temp\nso9DF5.tmp
(MyBrowser 1.0.2V06.10) C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6.exe
(MyBrowser 1.0.2V06.10) C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6.exe
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
() C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD\knsqCB46.tmp
() C:\Users\Abi\AppData\Roaming\SSN\ssn.exe
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
(MyBrowser 1.0.2V06.10) C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10.exe
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
() C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
() C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12452456 2012-02-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1021056 2012-03-08] (Atheros Commnucations)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800896 2012-03-08] (Atheros Commnucations)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2822952 2012-02-24] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Run: [InstantUpdate] => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuDaemon.exe [124520 2012-04-06] ()
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-09-20] (Egis Technology Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6111824 2015-09-03] (AVAST Software)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [mbot_ca_014010106] => [X]
HKLM-x32\...\Run: [gmsd_ca_005010107] => C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe [3976336 2015-10-05] ()
HKLM-x32\...\RunOnce: [upgmsd_ca_005010107.exe] => C:\Users\Abi\AppData\Local\gmsd_ca_005010107\upgmsd_ca_005010107.exe [3300496 2015-10-05] ()
HKLM-x32\...\RunOnce: [Update] => C:\Users\Abi\AppData\Roaming\ASPackage\ASPackage.exe /runonce
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Run: [Save Serp Now] => C:\Users\Abi\AppData\Roaming\SSN\updssn.exe [26112 2014-11-21] ()
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Run: [GoogleChromeAutoLaunch_5E135CCE23F4BBF9E00EFA280613872A] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe [637440 2015-05-12] (Crossbrowse)
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Policies\Explorer: [NoLogOff] 0
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [450048 2011-09-12] ()
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-08-14] (AVAST Software)
Startup: C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk [2015-10-06]
ShortcutTarget: crossbrowse.lnk -> C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (Crossbrowse)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog9 01 C:\Windows\SysWOW64\Kixjucfio.dll [283496 2015-10-04] ()
Winsock: Catalog9 02 C:\Windows\SysWOW64\Kixjucfio.dll [283496 2015-10-04] ()
Winsock: Catalog9 03 C:\Windows\SysWOW64\Kixjucfio.dll [283496 2015-10-04] ()
Winsock: Catalog9 04 C:\Windows\SysWOW64\Kixjucfio.dll [283496 2015-10-04] ()
Winsock: Catalog9 16 C:\Windows\SysWOW64\Kixjucfio.dll [283496 2015-10-04] ()
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 64.71.255.204 64.71.255.198
Tcpip\..\Interfaces\{15CD2FC4-BBE6-4572-989A-6AE7E0E8ED2E}: [NameServer] 82.163.143.162,82.163.142.164
Tcpip\..\Interfaces\{F6B24CDD-A746-40B4-A6EC-4E45B40509B2}: [NameServer] 82.163.143.162,82.163.142.164
Tcpip\..\Interfaces\{F6B24CDD-A746-40B4-A6EC-4E45B40509B2}: [DhcpNameServer] 64.71.255.204 64.71.255.198
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www-searching.com/search.aspx?s=FA5zbwybl001,5e975b8b-9a9b-4b31-93c1-85af2746d910,&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www-searching.com/search.aspx?s=FA5zbwybl001,5e975b8b-9a9b-4b31-93c1-85af2746d910,&q={searchTerms}
SearchScopes: HKLM -> {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = hxxp://www-searching.com/search.aspx?s=FA5zbwybl001,5e975b8b-9a9b-4b31-93c1-85af2746d910,&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www-searching.com/search.aspx?s=FA5zbwybl001,5e975b8b-9a9b-4b31-93c1-85af2746d910,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> {4F1251B0-ED36-4A53-B1D8-0700B350C9B6} URL = hxxp://www-searching.com/search.aspx?s=FA5zbwybl001,5e975b8b-9a9b-4b31-93c1-85af2746d910&site=shyosie&prd=set&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> {5885ECFB-B6D1-4EDE-AF43-AED548EF4833} URL =
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = hxxp://www-searching.com/search.aspx?s=FA5zbwybl001,5e975b8b-9a9b-4b31-93c1-85af2746d910,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1835340503-273950527-3103715778-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-14] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO: No Name -> {93F8D5C2-0BF6-4315-9316-AA5FC9948AC5} -> No File
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-03-08] (Atheros Commnucations)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-14] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-10-03] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll [2013-09-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-10-03] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-07] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll [2013-09-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [No File]
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-05-11] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)
FF HKLM\...\Firefox\Extensions: [{93F8D5C2-0BF6-4315-9316-AA5FC9948AC5}] - C:\Program Files\shopperz011020151101\Firefox
FF Extension: shopperz011020151101 - C:\Program Files\shopperz011020151101\Firefox [2015-10-04]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-12-02]
FF HKLM-x32\...\Firefox\Extensions: [{93F8D5C2-0BF6-4315-9316-AA5FC9948AC5}] - C:\Program Files\shopperz011020151101\Firefox
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.ca/
CHR StartupUrls: Default -> "hxxp://www.trovi.com/?gd=&ctid=CT3333887&octid=EB_ORIGINAL_CTID&ISID=M9949BBB5-612F-46C6-AB70-1CB1982CDBD9&SearchSource=55&CUI=&UM=8&UP=SPA5B516FC-0DD9-40D3-9CAD-07D1BA184ADB&D=100415&SSPV="
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\pdf.dll => No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.2_0\McChPlg.dll => No File
CHR Plugin: (Adobe Acrobat) - c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL => No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll => No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll => No File
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll => No File
CHR Profile: C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-11-25]
CHR Extension: (YouTube) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-25]
CHR Extension: (Google Search) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-25]
CHR Extension: (MyBrowser 1.0.2V06.10) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh [2015-10-06]
CHR Extension: (Google Docs Offline) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-06]
CHR Extension: (Avast Online Security) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-08-25]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-04]
CHR Extension: (Skype Click to Call) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-12-02]
CHR Extension: (CinemaP-1.9cV04.10) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-10-04]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29]
CHR Extension: (CinemaPlus-3.2cV04.10) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-10-04]
CHR Extension: (Gmail) - C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-25]
CHR HKU\S-1-5-21-1835340503-273950527-3103715778-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-08-14]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [107648 2012-03-08] (Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-08-14] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4047768 2015-08-14] (Avast Software)
R2 bigosucu; C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD\knsqCB46.tmp [396288 2015-10-06] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R3 csrcc; C:\Program Files\shopperz011020151101\csrcc.exe [1444544 2015-10-01] ()
R2 gyvixodu; C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD\hnsfFB53.tmp [203776 2015-10-04] () [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-03-16] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-16] (Intel Corporation)
R3 Kixjucfio; C:\Program Files\shopperz011020151101\Kixjucfio.exe [2024808 2015-10-01] ()
R2 NetTcpHandler; C:\Users\Abi\AppData\Roaming\NetService\netservice.exe [173088 2015-07-08] ()
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 shopperz011020151101 Updater; C:\Program Files\shopperz011020151101\Vubficvh.exe [171200 2015-10-01] ()
R2 swsesrvc_1.10.0.25; C:\Program Files (x86)\SwiftSearch_1.10.0.25\Service\swsesrvc.exe [301648 2015-09-22] (SS)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [76960 2012-02-27] (Atheros) [File not signed]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-08-14] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-08-14] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-08-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-08-14] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048344 2015-08-16] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-08-14] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-08-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-08-14] (AVAST Software)
R1 bsdriver; C:\Windows\system32\drivers\bsdriver.sys [34720 2015-10-04] ()
R1 cherimoya; C:\Windows\System32\drivers\cherimoya.sys [61344 2015-09-24] (Cherimoya Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [115152 2015-08-14] (AVAST Software)
R1 swsedrvr_vt_1_10_0_25; C:\Windows\System32\drivers\swsedrvr_vt_1_10_0_25.sys [61304 2015-09-22] (SS)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-08-14] (Avast Software)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-06 20:47 - 2015-10-06 20:47 - 00033247 _____ C:\Users\Abi\Desktop\FRST.txt
2015-10-06 20:46 - 2015-10-06 20:47 - 00000000 ____D C:\FRST
2015-10-06 20:45 - 2015-10-06 20:43 - 02193920 _____ (Farbar) C:\Users\Abi\Desktop\FRST64.exe
2015-10-06 20:41 - 2015-10-06 20:41 - 00000000 ____D C:\Users\Abi\Desktop\SoftwareTools
2015-10-06 13:47 - 2015-10-06 20:39 - 00002824 _____ C:\Windows\System32\Tasks\APSnotifierPP1
2015-10-06 13:47 - 2015-10-06 20:39 - 00002822 _____ C:\Windows\System32\Tasks\APSnotifierPP3
2015-10-06 13:47 - 2015-10-06 20:39 - 00002822 _____ C:\Windows\System32\Tasks\APSnotifierPP2
2015-10-06 13:47 - 2015-10-06 20:39 - 00000378 _____ C:\Windows\Tasks\APSnotifierPP1.job
2015-10-06 13:47 - 2015-10-06 20:39 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP3.job
2015-10-06 13:47 - 2015-10-06 20:39 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP2.job
2015-10-06 13:47 - 2015-10-06 13:47 - 00004034 _____ C:\Windows\System32\Tasks\ORGJcze6Wh9asiLsOyqhOX
2015-10-06 13:47 - 2015-10-06 13:47 - 00001049 _____ C:\Users\Abi\Desktop\AnyProtect.lnk
2015-10-06 13:47 - 2015-10-06 13:47 - 00001008 _____ C:\Windows\Tasks\ORGJcze6Wh9asiLsOyqhOX.job
2015-10-06 13:47 - 2015-10-06 13:47 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
2015-10-06 13:46 - 2015-10-06 20:46 - 00005858 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6.job
2015-10-06 13:46 - 2015-10-06 20:46 - 00003134 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6.job
2015-10-06 13:46 - 2015-10-06 13:47 - 00000000 ____D C:\Program Files (x86)\AnyProtectEx
2015-10-06 13:46 - 2015-10-06 13:46 - 00613255 _____ (CMI Limited) C:\Users\Abi\AppData\Local\nsp2B0E.tmp
2015-10-06 13:46 - 2015-10-06 13:46 - 00008886 _____ C:\Windows\System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6
2015-10-06 13:46 - 2015-10-06 13:46 - 00008544 _____ C:\Windows\System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-7
2015-10-06 13:46 - 2015-10-06 13:46 - 00006500 _____ C:\Windows\System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-7
2015-10-06 13:46 - 2015-10-06 13:46 - 00006162 _____ C:\Windows\System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6
2015-10-06 13:46 - 2015-10-06 13:46 - 00005514 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-7.job
2015-10-06 13:46 - 2015-10-06 13:46 - 00005472 _____ C:\Windows\System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5
2015-10-06 13:46 - 2015-10-06 13:46 - 00003470 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-7.job
2015-10-06 13:46 - 2015-10-06 13:46 - 00002442 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5_user.job
2015-10-06 13:46 - 2015-10-06 13:46 - 00002442 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5.job
2015-10-06 13:46 - 2015-10-06 13:46 - 00000000 __SHD C:\Users\Abi\AppData\Roaming\AnyProtectEx
2015-10-06 13:46 - 2015-10-06 13:46 - 00000000 ____D C:\Program Files (x86)\e63821bb-3a31-457e-8aa3-f2cc9efa11bf
2015-10-06 13:45 - 2015-10-06 20:45 - 00002108 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10_user.job
2015-10-06 13:45 - 2015-10-06 14:23 - 00000000 ____D C:\Users\Abi\AppData\Local\gmsd_ca_005010107
2015-10-06 13:45 - 2015-10-06 13:46 - 00000000 ____D C:\Program Files (x86)\MyBrowser 1.0.2V06.10
2015-10-06 13:45 - 2015-10-06 13:45 - 00007520 _____ C:\Windows\System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-3
2015-10-06 13:45 - 2015-10-06 13:45 - 00004490 _____ C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-3.job
2015-10-06 13:45 - 2015-10-06 13:45 - 00000000 ____D C:\Program Files (x86)\gmsd_ca_005010107
2015-10-06 13:44 - 2015-10-06 13:44 - 00004078 _____ C:\Windows\System32\Tasks\Crossbrowse
2015-10-06 13:44 - 2015-10-06 13:44 - 00002398 _____ C:\Users\Public\Desktop\Crossbrowse.lnk
2015-10-06 13:44 - 2015-10-06 13:44 - 00001052 _____ C:\Windows\Tasks\Crossbrowse.job
2015-10-06 13:44 - 2015-10-06 13:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
2015-10-06 13:44 - 2015-10-06 13:44 - 00000000 ____D C:\Program Files (x86)\Crossbrowse
2015-10-05 22:07 - 2015-10-05 22:07 - 00002239 _____ C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
2015-10-05 22:07 - 2015-10-05 22:07 - 00000207 _____ C:\Windows\tweaking.com-regbackup-Abi-Laptop-Windows-7-Home-Premium-(64-bit).dat
2015-10-05 22:07 - 2015-10-05 22:07 - 00000000 ____D C:\RegBackup
2015-10-05 22:07 - 2015-10-05 22:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2015-10-05 22:07 - 2015-10-05 22:07 - 00000000 ____D C:\Program Files (x86)\Tweaking.com
2015-10-05 22:06 - 2015-10-05 22:04 - 04687448 _____ (Tweaking.com) C:\Users\Abi\Desktop\tweaking.com_registry_backup_setup.exe
2015-10-05 22:04 - 2015-10-05 22:04 - 04687448 _____ (Tweaking.com) C:\Users\Abi\Downloads\tweaking.com_registry_backup_setup.exe
2015-10-05 18:35 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2015-10-05 18:31 - 2009-06-10 17:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20151005-183130.backup
2015-10-05 18:24 - 2015-10-05 18:24 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2015-10-05 18:23 - 2015-10-05 19:50 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-10-05 18:23 - 2015-10-05 18:35 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-10-05 18:23 - 2015-10-05 18:23 - 00001395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-10-05 18:23 - 2015-10-05 18:23 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2015-10-05 18:23 - 2015-10-05 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-10-05 18:23 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2015-10-05 18:21 - 2015-10-05 18:22 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Abi\Downloads\spybot-2.4.exe
2015-10-04 21:34 - 2015-10-06 15:34 - 00002442 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5_user.job
2015-10-04 21:34 - 2015-10-06 15:34 - 00002442 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5.job
2015-10-04 21:34 - 2015-10-04 21:34 - 00005472 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5
2015-10-04 21:33 - 2015-10-06 20:38 - 00005858 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-6.job
2015-10-04 21:33 - 2015-10-06 20:38 - 00003134 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-6.job
2015-10-04 21:33 - 2015-10-06 15:33 - 00005514 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-7.job
2015-10-04 21:33 - 2015-10-06 15:33 - 00003470 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-7.job
2015-10-04 21:33 - 2015-10-04 21:33 - 00034720 _____ () C:\Windows\system32\Drivers\bsdriver.sys
2015-10-04 21:33 - 2015-10-04 21:33 - 00008886 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-6
2015-10-04 21:33 - 2015-10-04 21:33 - 00008544 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-7
2015-10-04 21:33 - 2015-10-04 21:33 - 00006500 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-7
2015-10-04 21:33 - 2015-10-04 21:33 - 00006162 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-6
2015-10-04 21:32 - 2015-10-06 15:32 - 00005180 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-11.job
2015-10-04 21:32 - 2015-10-06 15:32 - 00004490 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-3.job
2015-10-04 21:32 - 2015-10-06 13:46 - 00000000 ____D C:\Program Files (x86)\8a9babaa-d527-4b3a-9dbf-f6d4d5a9ba3b
2015-10-04 21:32 - 2015-10-05 06:16 - 00002108 _____ C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-10_user.job
2015-10-04 21:32 - 2015-10-04 21:32 - 00008210 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-11
2015-10-04 21:32 - 2015-10-04 21:32 - 00007520 _____ C:\Windows\System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-3
2015-10-04 21:32 - 2015-10-04 21:32 - 00003458 _____ C:\Windows\System32\Tasks\bvxvexvbg
2015-10-04 21:31 - 2015-10-06 13:18 - 00000000 ____D C:\Users\Abi\AppData\Local\bvxvexvbg
2015-10-04 21:31 - 2015-10-04 22:17 - 00000000 ____D C:\ProgramData\KeyStream
2015-10-04 21:31 - 2015-10-04 22:07 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV04.10
2015-10-04 21:31 - 2015-10-04 21:33 - 00000000 ____D C:\ProgramData\Service0561
2015-10-04 21:31 - 2015-10-04 21:33 - 00000000 ____D C:\Program Files (x86)\Feed Notifier
2015-10-04 21:31 - 2015-10-04 21:31 - 00000000 ____D C:\ProgramData\12db864551ae4c578eb17db1a9f5d3cf
2015-10-04 21:30 - 2015-10-05 19:51 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2015-10-04 21:30 - 2015-10-05 06:22 - 00000000 ____D C:\Users\Abi\AppData\Roaming\RunDir
2015-10-04 21:30 - 2015-10-05 06:18 - 00000000 ____D C:\Program Files\shopperz011020151101
2015-10-04 21:30 - 2015-10-04 21:32 - 00000000 ____D C:\Users\Abi\AppData\Local\SearchProtect
2015-10-04 21:30 - 2015-10-04 21:31 - 00004712 _____ C:\Windows\SysWOW64\Kixjucfio.ini
2015-10-04 21:30 - 2015-10-04 21:31 - 00002424 _____ C:\Windows\SysWOW64\KixjucfioOff.ini
2015-10-04 21:30 - 2015-10-04 21:31 - 00002424 _____ C:\Windows\system32\KixjucfioOff.ini
2015-10-04 21:30 - 2015-10-04 21:30 - 00003640 _____ C:\Windows\System32\Tasks\Delhivv
2015-10-04 21:30 - 2015-10-04 21:30 - 00001905 _____ C:\Users\Abi\Desktop\jogotempo.lnk
2015-10-04 21:30 - 2015-10-04 21:30 - 00000045 _____ C:\user.js
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Windows\system32\dev
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\Roaming\ortmp
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\Roaming\NetService
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jogotempo
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\LocalLow\Company
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\Local\Tempfolder
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Users\Abi\AppData\Local\MyBrowser
2015-10-04 21:30 - 2015-10-04 21:30 - 00000000 ____D C:\Program Files (x86)\jogotempo
2015-10-04 21:30 - 2015-10-01 04:03 - 00283496 _____ C:\Windows\SysWOW64\Kixjucfio.dll
2015-10-04 21:30 - 2015-09-24 11:46 - 00061344 _____ (Cherimoya Ltd) C:\Windows\system32\Drivers\cherimoya.sys
2015-10-04 21:29 - 2015-10-04 22:40 - 00000000 ____D C:\Users\Abi\AppData\Local\SmartWeb
2015-10-04 21:29 - 2015-10-04 21:29 - 00000000 ____D C:\Users\Abi\AppData\LocalLow\SmartWeb
2015-10-04 21:28 - 2015-10-05 06:17 - 00000292 _____ C:\Windows\Tasks\yxnb.job
2015-10-04 21:27 - 2015-10-05 21:40 - 00170647 _____ C:\Windows\wininit.ini
2015-10-04 21:27 - 2015-10-04 22:33 - 00000000 ____D C:\Users\Abi\AppData\Local\DeskBar
2015-10-04 21:27 - 2015-10-04 21:27 - 00002297 _____ C:\Users\Abi\Desktop\BrowserAir.lnk
2015-10-04 21:27 - 2015-10-04 21:27 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserAir
2015-10-04 21:27 - 2015-10-04 21:27 - 00000000 ____D C:\Users\Abi\AppData\Local\Crossbrowse
2015-10-04 21:27 - 2015-10-04 21:27 - 00000000 ____D C:\Users\Abi\AppData\Local\BrowserAir
2015-10-04 21:26 - 2015-10-06 20:38 - 00003128 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6.job
2015-10-04 21:26 - 2015-10-06 15:26 - 00003128 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-7.job
2015-10-04 21:26 - 2015-10-06 15:26 - 00002436 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5_user.job
2015-10-04 21:26 - 2015-10-06 15:26 - 00002436 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5.job
2015-10-04 21:26 - 2015-10-06 13:11 - 00001012 _____ C:\Windows\Tasks\qmKnKxZOiKwp192d4S8lxBYl.job
2015-10-04 21:26 - 2015-10-04 21:26 - 00006158 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-7
2015-10-04 21:26 - 2015-10-04 21:26 - 00006156 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6
2015-10-04 21:26 - 2015-10-04 21:26 - 00005466 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5
2015-10-04 21:26 - 2015-10-04 21:26 - 00004236 _____ C:\Windows\System32\Tasks\SMW_UpdateTask_Time_313139303630333836352d45372a5a506c41324a345741
2015-10-04 21:26 - 2015-10-04 21:26 - 00004038 _____ C:\Windows\System32\Tasks\qmKnKxZOiKwp192d4S8lxBYl
2015-10-04 21:26 - 2015-10-04 21:26 - 00003526 _____ C:\Windows\System32\Tasks\Inst_Rep
2015-10-04 21:26 - 2015-10-04 21:26 - 00000000 ____D C:\ProgramData\SearchModule
2015-10-04 21:26 - 2015-10-04 21:26 - 00000000 ____D C:\Program Files\Common Files\Goobzo
2015-10-04 21:25 - 2015-10-06 20:45 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-10-04 21:25 - 2015-10-06 20:40 - 00000990 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-10-04 21:25 - 2015-10-06 20:40 - 00000000 ____D C:\Program Files (x86)\globalUpdate
2015-10-04 21:25 - 2015-10-06 20:38 - 00005508 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-6.job
2015-10-04 21:25 - 2015-10-06 15:25 - 00005174 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-11.job
2015-10-04 21:25 - 2015-10-06 15:25 - 00005172 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-7.job
2015-10-04 21:25 - 2015-10-06 15:25 - 00004148 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-3.job
2015-10-04 21:25 - 2015-10-06 13:50 - 00000994 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-10-04 21:25 - 2015-10-06 13:45 - 00003992 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-10-04 21:25 - 2015-10-06 13:45 - 00003738 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-10-04 21:25 - 2015-10-05 06:16 - 00002102 _____ C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-10_user.job
2015-10-04 21:25 - 2015-10-04 22:07 - 00000000 ____D C:\Program Files (x86)\CinemaP-1.9cV04.10
2015-10-04 21:25 - 2015-10-04 21:25 - 00008536 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-6
2015-10-04 21:25 - 2015-10-04 21:25 - 00008204 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-11
2015-10-04 21:25 - 2015-10-04 21:25 - 00008202 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-7
2015-10-04 21:25 - 2015-10-04 21:25 - 00007178 _____ C:\Windows\System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-3
2015-10-04 21:25 - 2015-10-04 21:25 - 00000000 ____D C:\Users\Abi\AppData\Local\globalUpdate
2015-10-04 21:25 - 2015-10-04 21:25 - 00000000 ____D C:\Program Files (x86)\119312c4-11b3-4129-ab16-95e16f122005
2015-10-04 21:24 - 2015-10-04 21:24 - 00004186 _____ C:\Windows\System32\Tasks\SwiftSearch Auto Updater 1.10.0.25 Pending Update
2015-10-04 21:24 - 2015-10-04 21:24 - 00004174 _____ C:\Windows\System32\Tasks\SwiftSearch Auto Updater 1.10.0.25 Core
2015-10-04 21:23 - 2015-10-04 21:24 - 00000000 ____D C:\Program Files (x86)\SwiftSearch_1.10.0.25
2015-10-04 21:20 - 2015-10-05 18:27 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Opera Software
2015-10-04 21:20 - 2015-10-05 18:27 - 00000000 ____D C:\Users\Abi\AppData\Local\Opera Software
2015-10-04 21:20 - 2015-10-05 18:27 - 00000000 ____D C:\Program Files (x86)\Opera
2015-10-04 21:20 - 2015-10-04 21:25 - 00000000 ____D C:\Users\Abi\AppData\Local\A0FEA676-1443993646-E111-9F63-E98E551D30CD
2015-10-04 21:20 - 2009-06-10 17:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-10-04 21:19 - 2015-10-06 15:11 - 00000000 ____D C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD
2015-10-04 21:19 - 2015-10-05 12:27 - 00000000 ____D C:\Users\Abi\AppData\Roaming\ASPackage
2015-10-04 21:19 - 2015-10-04 21:19 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage
2015-10-04 21:19 - 2015-10-04 21:19 - 00000000 ____D C:\Users\Abi\AppData\Local\Geckofx
2015-10-04 21:18 - 2015-10-04 21:18 - 00000000 ____D C:\Users\Abi\AppData\Roaming\proical
2015-10-04 21:17 - 2015-10-04 21:27 - 00000000 ____D C:\Program Files (x86)\KMSPico 10.0.6
2015-10-04 21:17 - 2015-10-04 21:18 - 00000000 ____D C:\Users\Abi\AppData\Roaming\SSN
2015-10-03 16:19 - 2015-10-03 16:19 - 00001008 _____ C:\Users\Public\Desktop\LockDown Browser FOL.lnk
2015-10-03 16:19 - 2015-10-03 16:19 - 00000000 ____D C:\Program Files (x86)\Respondus
2015-10-03 16:16 - 2015-10-03 16:17 - 56749720 _____ (Respondus, Inc.) C:\Users\Abi\Downloads\LockDownBrowser-200-02.exe
2015-10-02 14:42 - 2015-10-02 14:42 - 00000000 ____D C:\Users\Abi\AppData\Local\{2319E2F5-D64B-4A67-A7CC-AAFC35C207EC}
2015-10-02 11:41 - 2015-10-02 11:41 - 00186880 _____ (TODO: <Company name>) C:\Windows\system32\rsrcs.dll
2015-10-01 21:53 - 2015-10-01 21:53 - 04032512 _____ C:\Users\Abi\Downloads\0176509739_386709.ppt
2015-09-23 19:48 - 2015-09-23 19:48 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Awesomium
2015-09-22 17:41 - 2015-09-22 17:41 - 00061304 _____ (SS) C:\Windows\system32\Drivers\swsedrvr_vt_1_10_0_25.sys
2015-09-22 17:41 - 2015-09-22 17:41 - 00057720 _____ (SS) C:\Windows\system32\Drivers\swsedrvr_vw_1_10_0_25.sys
2015-09-22 09:30 - 2015-09-22 09:30 - 00022641 _____ C:\Users\Abi\Downloads\receipt for Sept 13.zip
2015-09-21 19:19 - 2015-09-21 19:19 - 00387071 _____ C:\Users\Abi\Downloads\Sheri chp2 PPT6 Correcting Entries.pptx
2015-09-21 19:18 - 2015-09-21 19:18 - 01309276 _____ C:\Users\Abi\Downloads\Sheri chp1 PPT5 Financial Statements.pptx
2015-09-21 19:18 - 2015-09-21 19:18 - 00539375 _____ C:\Users\Abi\Downloads\Sheri chp2 PPT4 Posting.pptx
2015-09-21 19:18 - 2015-09-21 19:18 - 00392069 _____ C:\Users\Abi\Downloads\Sheri chp2 PPT5 Unadjusted Trial Balance.pptx
2015-09-21 19:17 - 2015-09-21 19:17 - 01575824 _____ C:\Users\Abi\Downloads\Sheri chp2 PPT3 Journalizing.pptx
2015-09-21 19:17 - 2015-09-21 19:17 - 01086144 _____ C:\Users\Abi\Downloads\Sheri chp2 PPT2 The Double Entry Accounting System.pptx
2015-09-21 19:17 - 2015-09-21 19:17 - 01060913 _____ C:\Users\Abi\Downloads\Sheri chp2 ppt1 Analyizing Transactions.pptx
2015-09-18 16:18 - 2015-09-18 16:19 - 88847328 _____ C:\Users\Abi\Downloads\PhotoPass_20150918_55fc70a06287e_3.zip
2015-09-18 16:16 - 2015-09-18 16:19 - 164912544 _____ C:\Users\Abi\Downloads\PhotoPass_20150918_55fc70a06287e_4.zip
2015-09-18 16:15 - 2015-09-18 16:19 - 164912544 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_4 (4).zip
2015-09-18 16:15 - 2015-09-18 16:19 - 151613672 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_1 (6).zip
2015-09-18 16:15 - 2015-09-18 16:19 - 149921556 _____ C:\Users\Abi\Downloads\PhotoPass_20150918_55fc70a06287e_1.zip
2015-09-18 16:15 - 2015-09-18 16:18 - 124142712 _____ C:\Users\Abi\Downloads\PhotoPass_20150918_55fc70a06287e_2.zip
2015-09-18 16:15 - 2015-09-18 16:18 - 123003816 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_2 (3).zip
2015-09-18 16:15 - 2015-09-18 16:16 - 45656825 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_3 (4).zip
2015-09-16 16:58 - 2015-09-16 16:59 - 164912544 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_4 (3).zip
2015-09-16 16:57 - 2015-09-16 16:57 - 45656825 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_3 (3).zip
2015-09-16 16:55 - 2015-09-16 16:58 - 164912544 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_4 (2).zip
2015-09-16 16:55 - 2015-09-16 16:58 - 123003816 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_2 (2).zip
2015-09-16 16:55 - 2015-09-16 16:57 - 151613672 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_1 (5).zip
2015-09-16 16:55 - 2015-09-16 16:55 - 45656825 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_3 (2).zip
2015-09-16 16:54 - 2015-09-16 16:57 - 151613672 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_1 (4).zip
2015-09-16 16:52 - 2015-09-16 16:53 - 151613672 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_1 (3).zip
2015-09-14 19:37 - 2015-09-14 19:37 - 01086144 _____ C:\Users\Abi\Downloads\Sheri+chp2+PPT2+The+Double+Entry+Accounting+System.pptx
2015-09-12 16:12 - 2015-09-12 16:12 - 01060913 _____ C:\Users\Abi\Downloads\Sheri+chp2+ppt1+Analyizing+Transactions.pptx
2015-09-12 16:09 - 2015-09-12 16:09 - 00065296 _____ C:\Users\Abi\Downloads\Sheri+chp1+PPT3+The+Accounting+Equation.pptx
2015-09-12 16:08 - 2015-09-12 16:08 - 00323754 _____ C:\Users\Abi\Downloads\Sheri+chp1+PPT4+Recording+Business+Transactions.pptx
2015-09-09 20:32 - 2015-09-09 20:32 - 03036691 _____ C:\Users\Abi\Downloads\ADMN-1014+Getting+Started+_Online.pptx
2015-09-09 20:27 - 2015-09-09 20:27 - 02980659 _____ C:\Users\Abi\Downloads\ADMN-1014+Course+Introduction_Online.pptx
2015-09-08 14:05 - 2015-09-08 14:05 - 02980659 _____ C:\Users\Abi\Downloads\ADMN-1014 Course Introduction_Online.pptx
2015-09-07 15:53 - 2015-09-07 15:53 - 00000000 ____D C:\Users\Abi\Documents\Paradigm
2015-09-07 15:53 - 2015-09-07 15:53 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Paradigm
2015-09-07 15:51 - 2015-10-06 20:38 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-07 15:51 - 2015-10-03 16:19 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-09-07 15:51 - 2015-09-07 15:51 - 00002771 _____ C:\Users\Public\Desktop\Launch Online Lab.lnk
2015-09-07 15:51 - 2015-09-07 15:51 - 00000000 ____D C:\ProgramData\Paradigm
2015-09-07 15:51 - 2015-09-07 15:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paradigm
2015-09-07 15:51 - 2015-09-07 15:51 - 00000000 ____D C:\Program Files (x86)\Paradigm
2015-09-07 14:56 - 2015-09-07 14:56 - 00764562 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-09-07 14:44 - 2015-09-07 14:44 - 00889416 _____ (Microsoft Corporation) C:\Users\Abi\Downloads\dotNetFx40_Full_setup.exe
2015-09-07 14:42 - 2015-09-07 14:42 - 30893992 _____ (Paradigm) C:\Users\Abi\Downloads\keyboarding6e2013.exe
2015-09-07 14:35 - 2015-09-07 14:35 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2015-09-07 14:35 - 2015-09-07 14:35 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2015-09-07 14:34 - 2015-09-07 14:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-09-07 14:33 - 2015-09-07 14:35 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2015-09-07 14:33 - 2015-09-07 14:33 - 00000000 ____D C:\Windows\PCHEALTH
2015-09-07 14:30 - 2015-09-07 14:30 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2015-09-07 14:30 - 2015-09-07 14:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2015-09-07 14:29 - 2015-09-07 14:33 - 00000000 ____D C:\Program Files\Microsoft Office
2015-09-06 21:53 - 2015-09-06 21:53 - 00000000 ____D C:\Users\Abi\Downloads\PREACTIVATED WINDOWS 7 + WINDOWS 8.1 +OFFICE 2013 PRO PLUS
2015-09-06 21:52 - 2015-09-06 21:52 - 00733005 _____ C:\Users\Abi\Downloads\PREACTIVATED_WINDOWS_7_+_WINDOWS_8_1_+_OFFICE_2013_PRO_PLUS.torrent
2015-09-06 17:00 - 2015-09-07 14:19 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2015-09-06 16:07 - 2015-09-07 14:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-09-06 11:37 - 2015-09-06 11:37 - 00000000 ____D C:\Users\Abi\Downloads\Microsoft Office 2013 SP1 Pro + Visio + Project + 15.0.4737.1001 RePack by KpoJIuK
2015-09-06 11:36 - 2015-09-06 11:36 - 00029320 _____ C:\Users\Abi\Downloads\28E409E030BECEF170CEBD51EB41C2EDA4B2E316.torrent
2015-09-06 11:35 - 2015-09-06 11:35 - 00002635 _____ C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-09-06 11:34 - 2015-09-07 04:46 - 00000000 ____D C:\Users\Abi\AppData\Roaming\uTorrent
2015-09-06 11:34 - 2015-09-06 11:34 - 01699936 _____ (BitTorrent Inc.) C:\Users\Abi\Downloads\uTorrent.exe
2015-09-06 10:21 - 2015-09-06 10:22 - 151613672 _____ C:\Users\Abi\Downloads\PhotoPass_20150903_55e86580ec21f_1 (2).zip
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-06 20:47 - 2009-07-14 01:13 - 00779018 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-06 20:39 - 2012-11-25 21:20 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-06 20:39 - 2012-09-22 15:08 - 00000000 ____D C:\Users\Abi\AppData\Roaming\Skype
2015-10-06 20:38 - 2012-05-28 10:39 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2015-10-06 20:38 - 2012-05-28 10:33 - 01954797 _____ C:\Windows\WindowsUpdate.log
2015-10-06 15:17 - 2012-12-02 15:49 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-10-06 13:20 - 2009-07-14 00:45 - 00024416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-06 13:20 - 2009-07-14 00:45 - 00024416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-06 13:11 - 2012-11-25 21:21 - 00002475 _____ C:\Users\Abi\Desktop\Google Chrome.lnk
2015-10-06 13:08 - 2012-05-28 10:39 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2015-10-06 13:08 - 2009-07-14 01:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-06 13:07 - 2009-07-14 00:51 - 00063271 _____ C:\Windows\setupact.log
2015-10-05 22:21 - 2012-08-18 19:47 - 00001417 _____ C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-10-05 21:52 - 2014-03-30 11:33 - 00000000 ____D C:\Users\Abi\AppData\Roaming\DesktopIconForAmazon
2015-10-05 18:35 - 2015-07-31 15:11 - 00000000 ____D C:\Program Files\Common Files\AV
2015-10-05 18:31 - 2009-07-13 22:34 - 00450771 ____R C:\Windows\system32\Drivers\etc\hosts.20151005-214925.backup
2015-10-05 12:27 - 2009-07-14 01:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-10-05 06:17 - 2009-07-14 00:45 - 00459216 _____ C:\Windows\system32\FNTCACHE.DAT
2015-10-04 22:55 - 2015-04-19 08:20 - 00000626 _____ C:\Users\Abi\AppData\Roaming\qmKnKxZOiKwp192d4S8lxBYl
2015-10-04 21:30 - 2012-04-04 03:23 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2015-10-04 21:30 - 2012-04-04 03:23 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2015-10-04 21:27 - 2012-10-21 10:44 - 00000000 ____D C:\Users\Abi\AppData\Local\CrashDumps
2015-10-04 21:25 - 2012-04-04 04:20 - 00000000 ____D C:\Program Files (x86)\Acer
2015-10-04 10:36 - 2015-01-02 17:12 - 00044433 _____ C:\Users\Abi\Documents\Bills 2014 2015.xlsx
2015-10-03 16:19 - 2015-01-03 16:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Respondus
2015-10-03 16:19 - 2015-01-03 16:13 - 00000000 ____D C:\Program Files (x86)\Respondus LockDown Browser
2015-10-03 16:19 - 2012-04-04 03:56 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-10-03 16:19 - 2012-04-04 03:51 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-03 16:19 - 2012-04-04 03:51 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-03 16:10 - 2012-11-25 21:20 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-10-03 16:10 - 2012-05-28 10:39 - 00003492 _____ C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d
2015-10-01 21:12 - 2013-08-22 18:18 - 00000000 ____D C:\Users\Abi\Documents\Christmas
2015-09-24 14:01 - 2012-09-02 12:25 - 00000000 ____D C:\Users\Abi\AppData\Local\Microsoft Help
2015-09-16 11:14 - 2012-11-25 21:20 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-16 11:14 - 2012-11-25 21:20 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-13 17:02 - 2012-11-25 14:24 - 00000000 ____D C:\Users\Abi\AppData\Local\Google
2015-09-10 14:40 - 2012-08-18 19:43 - 00113928 _____ C:\Users\Abi\AppData\Local\GDIPFONTCACHEV1.DAT
2015-09-09 11:41 - 2012-09-10 18:43 - 00000000 ____D C:\Users\Abi\Documents\School
2015-09-07 16:37 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\rescache
2015-09-07 14:38 - 2012-09-02 12:25 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-09-07 14:35 - 2012-04-04 04:10 - 00000000 ____D C:\Windows\ShellNew
2015-09-07 14:35 - 2009-07-13 23:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-09-07 14:31 - 2009-07-13 23:20 - 00000000 ____D C:\Program Files\Common Files\System
2015-09-07 14:31 - 2009-07-13 22:34 - 00000510 _____ C:\Windows\win.ini
2015-09-07 14:29 - 2012-05-28 11:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-09-07 14:22 - 2010-11-20 23:47 - 00374284 _____ C:\Windows\PFRO.log
2015-09-07 14:19 - 2012-04-04 04:18 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-09-07 14:17 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-09-07 13:44 - 2012-04-04 03:54 - 00001024 ___RH C:\Users\Public\Documents\NTIMMV9Acer.dll
2015-09-07 13:35 - 2012-04-04 03:56 - 00001024 ___RH C:\Users\Public\Documents\NTILiveUpdateV9.dll
2015-09-07 13:28 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-09-07 05:04 - 2014-01-22 22:32 - 00000000 ____D C:\Windows\system32\MRT
2015-09-06 09:47 - 2015-05-04 18:22 - 00000000 ____D C:\Users\Abi\AppData\Local\Windows Live
==================== Files in the root of some directories =======
2015-04-19 08:20 - 2015-04-19 08:20 - 0005872 _____ () C:\Users\Abi\AppData\Roaming\ORGJcze6Wh9asiLsOyqhOX
2015-04-20 10:05 - 2015-04-20 10:05 - 1579520 _____ () C:\Users\Abi\AppData\Roaming\ORGJcze6Wh9asiLsOyqhOX.exe
2015-04-19 08:20 - 2015-10-04 22:55 - 0000626 _____ () C:\Users\Abi\AppData\Roaming\qmKnKxZOiKwp192d4S8lxBYl
2015-04-20 10:05 - 2015-04-20 10:05 - 1579520 _____ () C:\Users\Abi\AppData\Roaming\qmKnKxZOiKwp192d4S8lxBYl.exe
2015-10-06 13:46 - 2015-10-06 13:46 - 0613255 _____ (CMI Limited) C:\Users\Abi\AppData\Local\nsp2B0E.tmp
2015-08-17 13:20 - 2015-08-17 13:20 - 0000851 _____ () C:\Users\Abi\AppData\Local\recently-used.xbel
2012-05-28 10:50 - 2012-05-28 10:53 - 0002454 _____ () C:\ProgramData\clear.fiSDK20.log
2012-05-28 10:51 - 2012-05-28 10:51 - 0000032 _____ () C:\ProgramData\PS.log
Some files in TEMP:
====================
C:\Users\Abi\AppData\Local\Temp\2203.exe
C:\Users\Abi\AppData\Local\Temp\6974.exe
C:\Users\Abi\AppData\Local\Temp\ose00000.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll
[2012-04-04 03:23] - [2015-10-04 21:30] - 0357888 ____A (Microsoft Corporation) F5411C5B71CD5077B30987CFC5C91B66
C:\Windows\SysWOW64\dnsapi.dll
[2012-04-04 03:23] - [2015-10-04 21:30] - 0270336 ____A (Microsoft Corporation) BDFB2EE32909A89B551EE92441316294
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-10-01 13:31
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version:04-10-2015
Ran by Abi (2015-10-06 20:48:38)
Running from C:\Users\Abi\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2012-08-18 23:41:56)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Abi (S-1-5-21-1835340503-273950527-3103715778-1001 - Administrator - Enabled) => C:\Users\Abi
Administrator (S-1-5-21-1835340503-273950527-3103715778-500 - Administrator - Disabled)
Guest (S-1-5-21-1835340503-273950527-3103715778-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1835340503-273950527-3103715778-1002 - Limited - Enabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\uTorrent) (Version: 3.4.4.40911 - BitTorrent Inc.)
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.100 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.2728.00 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.5.2728.00 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3010 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3507 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Instant Update Service (HKLM\...\{682EC6E8-A300-45FD-8F09-0F3A6EA334D6}) (Version: 1.00.3004 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 20.11.1107.1418 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.4.402.287 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Reader X (10.1.6) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.6 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
AnyProtect (HKLM-x32\...\AnyProtect) (Version: 1.0.0.4 - CMI Limited) <==== ATTENTION
AnySend (HKLM-x32\...\ASPackage) (Version: - CMI Limited) <==== ATTENTION
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.126 - Atheros)
Atheros Driver Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Atheros)
Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.3.2225 - AVAST Software)
Backup Manager V3 (x32 Version: 3.0.0.100 - NTI Corporation) Hidden
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Chronicles of Albian (x32 Version: 2.2.0.95 - WildTangent) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
CinemaP-1.9cV04.10 (HKLM-x32\...\CinemaP-1.9cV04.10) (Version: 1.36.01.22 - Cinema PlusV04.10) <==== ATTENTION
CinemaPlus-3.2cV04.10 (HKLM-x32\...\CinemaPlus-3.2cV04.10) (Version: 1.36.01.22 - Cinema PlusV04.10) <==== ATTENTION
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated)
clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden
Cradle of Rome 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Crossbrowse (HKLM-x32\...\Crossbrowse) (Version: 39.6.2171.95 - The Crossbrowse Authors) <==== ATTENTION
CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1720_38230 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.7 - Dolby Laboratories Inc)
Dora's World Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink)
DVDFab 9.2.0.2 (10/06/2015) Non-Decryption (HKLM-x32\...\DVDFab 9 NonDecALL_is1) (Version: - Fengtao Software Inc.)
ETDWare PS/2-X64 10.6.9.8_WHQL (HKLM\...\Elantech) (Version: 10.6.9.8 - ELAN Microelectronic Corp.)
Evernote v. 4.5.2 (HKLM-x32\...\{F77EF646-19EB-11E1-9A9E-984BE15F174E}) (Version: 4.5.2.5866 - Evernote Corp.)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Feed Notifier 2.6 (HKLM-x32\...\{6091F327-2B13-4193-A6F1-4B2271613A74}_is1) (Version: - Michael Fogleman)
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fooz Kids (HKLM-x32\...\FoozKids) (Version: 3.1.2 - FUHU, Inc.)
Fooz Kids (x32 Version: 3.1.2 - FUHU, Inc.) Hidden
Fooz Kids Platform (HKLM-x32\...\{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}) (Version: 2.1 - FUHU, Inc.)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
GamesDesktop 026.005010107 (HKLM-x32\...\gmsd_ca_005010107_is1) (Version: - GAMESDESKTOP) <==== ATTENTION
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.101 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.95 - WildTangent) Hidden
HandBrake 0.10.2 (HKLM-x32\...\HandBrake) (Version: 0.10.2 - )
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.4.1441 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
jogotempo 3.4 (HKLM-x32\...\jogotempo) (Version: 3.4 - DN)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KeyStream (HKLM-x32\...\KeyStream) (Version: - )
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.15 - Acer Inc.)
MakeMKV v1.8.10 (HKLM-x32\...\MakeMKV) (Version: v1.8.10 - GuinpinSoft inc)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MyBrowser 1.0.2V06.10 (HKLM-x32\...\MyBrowser 1.0.2V06.10) (Version: 1.36.01.22 - MyBrowser 1.0.2V06.10)
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
Noticeboard Renew (HKLM-x32\...\SoftwareUpdater) (Version: 1.0.0.0 - Noticeboard Renew)
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9006 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9006 - NTI Corporation) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Paradigm Keyboarding (HKLM-x32\...\{07ccd1ce-3d4a-4ec1-a4a2-e08ff97db84c}) (Version: 6.2.12 - Paradigm)
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.98 - WildTangent) Hidden
proical (HKLM-x32\...\{94a7f28f-1a35-490e-8bda-daf7e804e645}) (Version: 1.0.0 - citadex) <==== ATTENTION
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.54.309.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6577 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.27015 - Realtek Semiconductor Corp.)
Respondus LockDown Browser (HKLM-x32\...\{C0E5147E-C9F3-4360-9ED0-2E875F11766C}) (Version: 1.02.0001 - Respondus, Inc.)
Respondus LockDown Browser 2 (HKLM-x32\...\{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}) (Version: 2.00.0000 - Respondus)
Search module (HKLM-x32\...\Search module) (Version: - Goobzo)
Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - )
shopperz (HKLM\...\{93F8D5C2-0BF6-4315-9316-AA5FC9948AC5}_is1) (Version: 2.0.0.475 - shopperz) <==== ATTENTION
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
SmartWeb (HKLM-x32\...\SmartWeb) (Version: 8.0.9 - SoftBrain Technologies Ltd.) <==== ATTENTION
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
SSN (HKU\S-1-5-21-1835340503-273950527-3103715778-1001\...\Save Serp Now) (Version: 1.05 - SSN Corp) <==== ATTENTION
SwiftSearch 1.10.0.25 (HKLM-x32\...\SwiftSearch_1.10.0.25) (Version: 1.10.0.25 - SwiftSearch)
Tales of Lagoona (x32 Version: 2.2.0.98 - WildTangent) Hidden
Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 3.2.2 - Tweaking.com)
Update for Skype for Business 2015 (KB2889853) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0409-0000-0000000FF1CE}_Office15.PROPLUS_{BF1B3F01-93F3-4B83-93DB-132EB1AED259}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB2889853) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0419-0000-0000000FF1CE}_Office15.PROPLUS_{60CB2530-FFDB-4506-9B1D-3E82A0D8F55F}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB2889853) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0422-0000-0000000FF1CE}_Office15.PROPLUS_{88ED957B-9B08-4B2A-92C3-225527A6BB48}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{9BBF212C-5BD8-4C8A-B65F-91342D904ED8}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{9BBF212C-5BD8-4C8A-B65F-91342D904ED8}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0409-0000-0000000FF1CE}_Office15.PROPLUS_{9BBF212C-5BD8-4C8A-B65F-91342D904ED8}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0419-0000-0000000FF1CE}_Office15.PROPLUS_{9BBF212C-5BD8-4C8A-B65F-91342D904ED8}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0422-0000-0000000FF1CE}_Office15.PROPLUS_{9BBF212C-5BD8-4C8A-B65F-91342D904ED8}) (Version: - Microsoft)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Virtual Villagers 5 - New Believers (x32 Version: 2.2.0.97 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated)
WildTangent Games App (Acer Games) (x32 Version: 4.0.5.32 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1835340503-273950527-3103715778-1001_Classes\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}\InprocServer32 -> C:\Users\Abi\AppData\Roaming\proical\comanmin.dll () <==== ATTENTION
==================== Restore Points =========================
ATTENTION: System Restore is disabled
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 22:34 - 2015-10-05 21:49 - 00450771 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0568B927-97F8-4E63-A3D6-12424505FB86} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5_user => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-5.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {062F4E0A-EC63-435B-B245-F6F446086ED7} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-7 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-7.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {0A81DB0A-86CF-45FE-A6D8-4D3F2C8ED9FF} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: {1F7D7EE0-9989-4BAC-9F23-F64E8852D7A5} - System32\Tasks\bvxvexvbg => C:\Users\Abi\AppData\Local\bvxvexvbg\bvxvexvbg.exe [2015-09-21] () <==== ATTENTION
Task: {228BF3CF-98F1-44CA-BC78-50BA21B3C262} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {261C7A06-6327-441E-BF45-76819A4240ED} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-7 => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-7.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {2981835A-DE0D-4630-BB66-D5D214EF84A7} - System32\Tasks\Crossbrowse => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe [2015-10-06] () <==== ATTENTION
Task: {3399F2EA-ECA2-41A9-8A60-C4FD4A96FAEF} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-7 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-1-7.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {3E73F48D-810A-4622-8B7F-EF49AD832C7C} - System32\Tasks\qmKnKxZOiKwp192d4S8lxBYl => C:\Users\Abi\AppData\Roaming\qmKnKxZOiKwp192d4S8lxBYl.exe [2015-04-20] () <==== ATTENTION
Task: {46684C09-6A11-4F6A-A0E7-DB3A31730BBE} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-06] (Acer Incorporated)
Task: {4F96D115-B397-4AB7-9FB2-96BF5C3FF2CD} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\Cyberlink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2011-05-20] (CyberLink)
Task: {516FE8C3-447D-4660-944B-8DB95DFAD780} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-6 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-6.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {54FCB97E-2F03-44CD-A8B0-BE92EBFD1992} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-11 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-11.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {5C061765-DDA2-45D9-B39D-DB1FD3222DB7} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-10-06] (AnyProtect.com) <==== ATTENTION
Task: {5D98FF86-CF5E-403D-88A0-E2C52B8438DE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.)
Task: {652A310C-8C03-42C2-BC01-90A4CEAF1C6E} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-10-06] (AnyProtect.com) <==== ATTENTION
Task: {6A4ACB52-9C44-40D6-BC52-54DD49537F16} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {6B9DF09A-F399-4FA4-AFD4-07335F60F3C6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {71957BC3-0E7B-42B4-B6E8-F9AD6C3E7464} - System32\Tasks\ORGJcze6Wh9asiLsOyqhOX => C:\Users\Abi\AppData\Roaming\ORGJcze6Wh9asiLsOyqhOX.exe [2015-04-20] () <==== ATTENTION
Task: {75DF3501-E6DC-42A1-A00A-189EA483F493} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-7 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-7.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {786257AB-1ACF-4D9E-8467-196505D705F9} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: {833BB259-E9DF-4EC5-AD01-3C52A2DD693B} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-08-14] (AVAST Software)
Task: {85A05D18-A0AE-4DFA-B9CF-3E8067EC21AF} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-7 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-7.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {8A3DB2CA-F49F-4299-B5E2-F904AA641562} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {8B76CDE7-8F3D-47D4-93DA-0D13D3A98474} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-11 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-11.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {8B86FC70-581D-42A6-8DAE-8D2CC33AAA50} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5_user => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {94FF0B3A-9FFF-4517-A30A-8A1E901F1744} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {96C61418-12D0-4B93-A244-135B7D654DAF} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-7 => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-7.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {9929A2DF-2F18-4D57-8E79-086EE9CABCC3} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {9DE221A6-2A7C-4E33-A67F-C84D7FC11DE2} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5_user => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-5.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {A5D5BFC1-764F-435A-81BA-9F2C19E5BDD3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.)
Task: {A6A8B4A1-16A9-4A22-A15A-1C9D9D98DD55} - System32\Tasks\SMW_UpdateTask_Time_313139303630333836352d45372a5a506c41324a345741 => Wscript.exe //B "C:\ProgramData\SearchModule\smhe.js" smu.exe /invoke /f:check_services /l:0 <==== ATTENTION
Task: {A6AA2A0A-AC7D-4FC7-BE73-9A1F73B49381} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-08-09] (AVAST Software)
Task: {A6D7E3E5-4795-4788-BBE7-905370F6162C} - System32\Tasks\SwiftSearch Auto Updater 1.10.0.25 Core => C:\Program Files (x86)\SwiftSearch_1.10.0.25\Update\SwiftSearchAutoUpdateClient.exe [2015-09-22] (SS)
Task: {B1A33D93-AB6B-424E-BD76-887D2444541F} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe [2015-10-06] (AnyProtect.com) <==== ATTENTION
Task: {B2F708ED-5569-4DB5-8A04-D00661307C4B} - System32\Tasks\Delhivv => C:\Program Files\shopperz011020151101\Jewai.bat [2015-10-01] () <==== ATTENTION
Task: {B800BE4F-B4A6-4F0B-8519-8C5272F264FE} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-5.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {BFFB12DE-2C65-4DF3-A85F-48939B6BEBDB} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2011-03-28] (Egis Technology Inc.)
Task: {C28D81B6-681A-4EB9-AF69-A25388AAA93C} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-3 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-3.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {C602CC11-0D91-4BDF-83AB-0EF1DBEADFB0} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-6 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-1-6.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {CB1CBFC9-55FC-4CE3-AEF2-3555EF270044} - System32\Tasks\54a3041d-99ff-429c-936a-d64130846f89-3 => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-3.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {CC21B690-1935-467F-85E2-3C01F354B46B} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-5.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {D1BB3A9F-031C-44BB-B02A-B97087828686} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-03] (Adobe Systems Incorporated)
Task: {D2E681EA-5C42-43DC-BEAA-12B41AF92790} - System32\Tasks\SwiftSearch Auto Updater 1.10.0.25 Pending Update => C:\Program Files (x86)\SwiftSearch_1.10.0.25\Update\SwiftSearchAutoUpdateClient.exe [2015-09-22] (SS)
Task: {DA709299-9D01-49DB-AB79-DAB7951E5FA6} - System32\Tasks\Inst_Rep => C:\Users\Abi\AppData\Local\Installer\Install_30959\brakietut_tutbl_setup.exe [2015-10-04] ()
Task: {DC83EA6A-ADAA-42B0-8951-F1C723DF2B43} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-3 => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-3.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {E2ABDB3E-F2EC-48B3-A27C-61D611129605} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {E9326D63-CB15-46AF-AA82-5C3F0A89330A} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10_user => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {E996977D-816E-4E08-9381-076FAB763156} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {EBEDE228-8DCE-40FB-A5D7-021967AC76D1} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5 => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {EE2AF5C6-1468-4C9A-8549-1C7B5E01AFB4} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {EF010618-947F-4F0B-9DCF-DF05ADFEC634} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2011-03-28] (Egis Technology Inc.)
Task: {F2569539-3DA6-456C-9BF5-ED2AB7E1547E} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6 => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
Task: {FA0FAAED-6233-47E6-8046-A9F90A421B77} - System32\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-6 => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-6.exe [2015-10-04] (Cinema PlusV04.10) <==== ATTENTION
Task: {FBEE81D9-B7B2-46A6-9680-271B6C389E2C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {FCB5455C-08DF-4A19-A083-30CDB5A58517} - System32\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6 => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6.exe [2015-10-06] (MyBrowser 1.0.2V06.10) <==== ATTENTION
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-7.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-10_user.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-11.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-3.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-5_user.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-6.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\1a6a8721-b58e-429f-80a4-bb17deea77ff-7.job => C:\Program Files (x86)\CinemaP-1.9cV04.10\1a6a8721-b58e-429f-80a4-bb17deea77ff-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-1-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-10_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-11.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-3.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-5_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\54a3041d-99ff-429c-936a-d64130846f89-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV04.10\54a3041d-99ff-429c-936a-d64130846f89-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\Crossbrowse.job => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-7.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10_user.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-3.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5_user.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\efbdfbf3-aa47-462e-b912-1c138b57c7c5-7.job => C:\Program Files (x86)\MyBrowser 1.0.2V06.10\efbdfbf3-aa47-462e-b912-1c138b57c7c5-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ORGJcze6Wh9asiLsOyqhOX.job => C:\Users\Abi\AppData\Roaming\ORGJcze6Wh9asiLsOyqhOX.exe <==== ATTENTION
Task: C:\Windows\Tasks\qmKnKxZOiKwp192d4S8lxBYl.job => C:\Users\Abi\AppData\Roaming\qmKnKxZOiKwp192d4S8lxBYl.exe <==== ATTENTION
Task: C:\Windows\Tasks\yxnb.job => C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\tsmfh.dll
==================== Loaded Modules (Whitelisted) ==============
2012-10-01 20:36 - 2012-10-01 20:36 - 06522480 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2009-01-21 19:45 - 2009-01-21 19:45 - 01401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll
2015-09-30 11:57 - 2015-10-04 21:19 - 00161280 _____ () C:\Users\Abi\AppData\Roaming\proical\comanmin.dll
2015-10-04 21:20 - 2015-10-04 21:20 - 00203776 _____ () C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD\hnsfFB53.tmp
2012-05-28 11:08 - 2012-03-26 21:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-05-28 10:39 - 2012-03-16 07:48 - 00127320 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2015-10-04 21:30 - 2015-07-08 21:26 - 00173088 _____ () C:\Users\Abi\AppData\Roaming\NetService\netservice.exe
2015-10-04 21:30 - 2015-10-01 11:05 - 00171200 _____ () C:\Program Files\shopperz011020151101\Vubficvh.exe
2012-04-06 23:29 - 2012-04-06 23:29 - 00040552 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
2012-04-06 23:29 - 2012-04-06 23:29 - 00022120 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
2015-10-01 04:03 - 2015-10-01 04:03 - 02024808 _____ () C:\Program Files\shopperz011020151101\Kixjucfio.exe
2015-10-04 21:30 - 2015-10-01 11:05 - 01444544 _____ () C:\Program Files\shopperz011020151101\csrcc.exe
2015-10-06 13:45 - 2015-10-05 09:49 - 03300496 _____ () C:\Users\Abi\AppData\Local\gmsd_ca_005010107\upgmsd_ca_005010107.exe
2015-10-06 13:45 - 2015-10-05 09:49 - 03976336 _____ () C:\Program Files (x86)\gmsd_ca_005010107\gmsd_ca_005010107.exe
2015-10-06 13:46 - 2015-10-06 13:46 - 00228674 _____ () C:\Users\Abi\AppData\Local\Temp\nso9DF5.tmp
2015-10-06 14:20 - 2015-10-06 14:20 - 00396288 _____ () C:\Program Files (x86)\A0FEA676-1444007998-E111-9F63-E98E551D30CD\knsqCB46.tmp
2014-11-21 08:53 - 2014-11-21 08:53 - 00033792 _____ () C:\Users\Abi\AppData\Roaming\ssn\ssn.exe
2011-12-23 13:24 - 2011-12-23 13:24 - 00119808 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
2015-08-14 13:47 - 2015-08-14 13:47 - 00102864 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-08-14 13:47 - 2015-08-14 13:47 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-10-05 17:14 - 2015-10-05 17:14 - 02966528 _____ () C:\Program Files\AVAST Software\Avast\defs\15100501\algo.dll
2015-10-06 15:14 - 2015-10-06 15:14 - 02967040 _____ () C:\Program Files\AVAST Software\Avast\defs\15100601\algo.dll
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-01-05 17:22 - 2012-01-05 17:22 - 00465344 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-01-05 17:22 - 2012-01-05 17:22 - 01081368 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2012-01-05 17:22 - 2012-01-05 17:22 - 00125464 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2015-10-05 18:23 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-10-05 18:23 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2015-10-05 18:23 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-10-05 18:23 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2015-10-05 18:23 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2015-08-14 13:47 - 2015-08-14 13:47 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-09-30 11:57 - 2015-10-04 21:19 - 00134656 _____ () C:\Users\Abi\AppData\Roaming\proical\daycol.dll
2012-05-28 10:38 - 2012-03-07 10:27 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-10-06 13:44 - 2015-05-12 07:01 - 01070592 _____ () C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libglesv2.dll
2015-10-06 13:44 - 2015-05-12 07:01 - 00204800 _____ () C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libegl.dll
2015-10-06 13:44 - 2015-05-12 07:01 - 09003008 _____ () C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\pdf.dll
2015-10-06 13:44 - 2015-05-12 07:01 - 00896512 _____ () C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\ffmpegsumo.dll
2015-10-06 13:46 - 2015-10-06 13:46 - 00011264 _____ () C:\Users\Abi\AppData\Local\Temp\nsuAA25.tmp\System.dll
2015-10-06 13:46 - 2015-10-06 13:46 - 00009728 _____ () C:\Users\Abi\AppData\Local\Temp\nsuAA25.tmp\nsDialogs.dll
2015-10-06 13:46 - 2015-10-06 13:46 - 00025088 _____ () C:\Users\Abi\AppData\Local\Temp\nsuAA25.tmp\registry.dll
2015-10-06 13:46 - 2015-10-06 13:46 - 00067584 _____ () C:\Users\Abi\AppData\Local\Temp\nsuAA25.tmp\Math.dll
2015-10-06 13:46 - 2015-10-06 13:46 - 00058368 _____ () C:\Users\Abi\AppData\Local\Temp\nsuAA25.tmp\nsCBHTML5.dll
2014-04-21 16:00 - 2014-04-21 16:00 - 03378688 _____ () C:\Users\Abi\AppData\Roaming\ssn\mozjs.dll
2011-08-15 23:12 - 2011-08-15 23:12 - 02603520 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtCore4.dll
2011-08-17 19:48 - 2011-08-17 19:48 - 00322048 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\log4cplus.dll
2011-08-15 23:15 - 2011-08-15 23:15 - 00382464 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtXml4.dll
2011-08-17 19:48 - 2011-08-17 19:48 - 00195584 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\libgsoap.dll
2011-08-15 22:23 - 2011-08-15 22:23 - 00062464 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\zlib1.dll
2011-11-25 16:24 - 2011-11-25 16:24 - 00071680 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ServiceManagerStarter.dll
2011-08-15 23:12 - 2011-08-15 23:12 - 01006592 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtNetwork4.dll
2011-08-17 19:41 - 2011-08-17 19:41 - 00400384 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\sqlite3.dll
2011-11-25 16:29 - 2011-11-25 16:29 - 00015872 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\featureController.dll
2011-11-25 16:28 - 2011-11-25 16:28 - 00484352 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\DeviceProfile.dll
2011-11-25 16:42 - 2011-11-25 16:42 - 00499976 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\plugin\PServerPlugin.dll
2011-11-25 16:26 - 2011-11-25 16:26 - 00013824 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\eventsSender.dll
2011-07-19 19:05 - 2011-07-19 19:05 - 14978048 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtWebKit4.dll
2011-07-19 19:04 - 2011-07-19 19:04 - 00317952 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\phonon4.dll
2011-08-15 23:17 - 2011-08-15 23:17 - 09224704 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtGui4.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Abi\Desktop\AbiTax.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\AbiTax.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Desktop\babyscan.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\babyscan.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Desktop\matrrsp.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\matrrsp.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Desktop\mattax.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\mattax.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Desktop\member change form.png:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\member change form.png:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Desktop\midwife notes 1.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\midwife notes 1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Desktop\midwife notes 2.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Desktop\midwife notes 2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Documents\health card insurance.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Documents\health card insurance.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Documents\health card supplemental.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Documents\health card supplemental.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\Users\Abi\Documents\meditech registration.jpeg:3or4kl4x13tuuug3Byamue2s4b
AlternateDataStreams: C:\Users\Abi\Documents\meditech registration.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Kixjucfio => ""="service"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
There are 7866 more restricted sites.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1835340503-273950527-3103715778-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Abi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 82.163.143.162 - 82.163.142.164
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{8FD873D8-2066-4145-A6EA-3E5CA9999762}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{C16BCB7B-1797-4D27-AE2F-CCA5D9973D88}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{0AB6A935-09EA-411C-A307-9A77E2412E29}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{A379F547-BF8A-4B78-B1EC-8A3EC6B9E70B}] => (Allow) LPort=2869
FirewallRules: [{F1811CB8-11D7-4EBD-981A-B31337573DA4}] => (Allow) LPort=1900
FirewallRules: [{4262453D-0716-4ACD-8F19-DB26807F9B27}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{E166EA75-29F0-4D0C-BDCD-8F78CC6393A4}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{ADC0B634-7E7B-4D52-BBE1-9CA84E4CC298}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{16A286E4-E4A8-476D-AB0A-2549B1340571}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe
FirewallRules: [{1E125A22-3769-4B8C-B674-81D0A8D13701}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe
FirewallRules: [{8E2439BF-BD93-4B7F-A36E-D24DF0967F7D}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe
FirewallRules: [{B3BFE238-4A39-4983-A3DA-A92FF52D2C9F}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe
FirewallRules: [{EC564DF5-7E41-4E99-A174-CC6C9FCABE40}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe
FirewallRules: [{E6111690-229E-4C49-9DFF-AFF589063362}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe
FirewallRules: [{212A54F7-9BEF-4AA8-8E94-D6222C51EA20}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe
FirewallRules: [{832240CA-6103-4E8D-A264-8B1A74F61D93}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe
FirewallRules: [{03BE1C9E-8F6C-4E6E-B108-FE25A907A4E5}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK20\Movie\PlayMovie.exe
FirewallRules: [{6504793A-A869-45C7-B9C5-DA1B951CF00D}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK20\MVP\VideoPlayer.exe
FirewallRules: [{5500A754-C22F-4049-A0F9-664EEBB43E46}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK20\MVP\MusicPlayer.exe
FirewallRules: [{2A9DB574-E321-4CC3-97A0-ECB30BA8147D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{05EFD2AA-1D64-4CAA-9006-D3BF26FF778E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2EF53DD5-23A8-4F72-A4C0-E1CAAD27B2DC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3B3908AB-6BF2-4529-A028-C3C2041E8477}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BAE36271-63B2-4DFF-86B7-68D39AD241C7}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{3D73F9BA-CF8E-4551-AABC-585D7F817F8D}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{F79E4460-7D5A-4370-9A64-CEE010DE6206}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{BF322E37-E5EA-436C-AF36-3A4595BC678B}] => (Allow) C:\Users\Abi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B852340F-1685-4D2E-9906-F55B0506E5DD}] => (Allow) C:\Users\Abi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2E732776-CA4E-498C-B962-DFAC8A1FB5FE}] => (Allow) C:\Users\Abi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7EAF9ED6-AB60-4A55-9578-00BAA4BCEE81}] => (Allow) C:\Users\Abi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{24194B42-340B-4CB1-94F5-8CF7C00AEFD5}] => (Allow) C:\Users\Abi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E415A74A-8EE5-473A-A76A-EAA4E3AC9238}] => (Allow) C:\Users\Abi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{5345F8CB-3DC8-46BC-A9E6-FF71B206AAB3}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{BEC52C7D-31D9-4044-8AC0-7E744DBF1EAE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{B7D33C18-3B0F-4D31-8AF9-C270099EDBBE}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{26DF8587-01A5-4261-A680-9C0035D948B2}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{B68C9BEC-795E-4989-8669-F3E5A2DB4FB1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{DE04AFED-2CAF-4DC9-906B-2966B4B80132}] => (Allow) C:\Users\Abi\AppData\Roaming\SSN\ssn.exe
FirewallRules: [{873699D0-7464-4AE3-A3A3-3E5CED42977F}] => (Allow) C:\Users\Abi\AppData\Roaming\SSN\updssn.exe
FirewallRules: [{B9F1B326-EA08-4FE0-BF88-671B5C9AADAE}] => (Allow) C:\Users\Abi\AppData\Local\BrowserAir\Application\BrowserAir.exe
FirewallRules: [{E096DB31-FD1B-4FA8-8A6C-5A6B4211721F}] => (Allow) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Faulty Device Manager Devices =============
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/06/2015 08:38:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 17692541
Error: (10/06/2015 08:38:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 17692541
Error: (10/06/2015 08:38:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/06/2015 03:43:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1279
Error: (10/06/2015 03:43:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1279
Error: (10/06/2015 03:43:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/06/2015 03:38:44 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005
Error: (10/06/2015 02:35:47 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005
Error: (10/06/2015 01:45:58 PM) (Source: MsiInstaller) (EventID: 11316) (User: Abi-Laptop)
Description: Product: globalupdate Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi
Error: (10/05/2015 10:34:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Skype.exe version 6.14.0.104 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 130
Start Time: 01d0ffdde0d220e1
Termination Time: 0
Application Path: C:\Program Files (x86)\Skype\Phone\Skype.exe
Report Id:
System errors:
=============
Error: (10/06/2015 08:44:38 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR2.
Error: (10/06/2015 08:44:37 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR2.
Error: (10/06/2015 08:44:36 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR2.
Error: (10/06/2015 08:40:11 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.
Error: (10/06/2015 01:09:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Spybot-S&D 2 Scanner Service service failed to start due to the following error:
%%1053
Error: (10/06/2015 01:09:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Spybot-S&D 2 Scanner Service service to connect.
Error: (10/05/2015 10:45:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/05/2015 10:45:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/05/2015 10:45:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/05/2015 10:45:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-2367M CPU @ 1.40GHz
Percentage of memory in use: 66%
Total physical RAM: 5937.6 MB
Available physical RAM: 1996.82 MB
Total Virtual: 11873.39 MB
Available Virtual: 7425.08 MB
==================== Drives ================================
Drive c: (ACER) (Fixed) (Total:449.06 GB) (Free:247.12 GB) NTFS
Drive e: (KINGSTON) (Removable) (Total:14.53 GB) (Free:8.56 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 2B273B16)
Partition 1: (Not Active) - (Size=16.6 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=449.1 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 14.5 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=14.5 GB) - (Type=0C)
==================== End of Addition.txt ============================